x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:06:49 executing program 1: unshare(0x40000000) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:49 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 480.003655][T27238] IPVS: ftp: loaded support on port[0] = 21 [ 480.028737][T27243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.038412][ T220] tipc: TX() has been purged, node left! [ 480.055703][ T220] tipc: TX() has been purged, node left! [ 480.066349][T27246] IPVS: ftp: loaded support on port[0] = 21 [ 480.074477][ T220] tipc: TX() has been purged, node left! 11:06:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000080)={0x68, r1, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 11:06:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) [ 480.189487][ T220] tipc: TX() has been purged, node left! [ 480.222237][ T220] tipc: TX() has been purged, node left! [ 480.245872][T27252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.256169][ T220] tipc: TX() has been purged, node left! [ 480.303595][ T220] tipc: TX() has been purged, node left! [ 480.341048][ T220] tipc: TX() has been purged, node left! 11:06:49 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xa, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x2e, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x20}, 0xf0ff7f) [ 480.384251][ T220] tipc: TX() has been purged, node left! [ 480.410593][ T220] tipc: TX() has been purged, node left! 11:06:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xa, 0x30, 0x4, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000012c0), 0x88, r0}, 0x38) 11:06:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) [ 480.471427][ T220] tipc: TX() has been purged, node left! [ 480.505125][ T220] tipc: TX() has been purged, node left! 11:06:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)={0x24}) [ 480.649936][ T220] tipc: TX() has been purged, node left! [ 480.809950][ T220] tipc: TX() has been purged, node left! [ 480.970021][ T220] tipc: TX() has been purged, node left! [ 481.010434][ T220] tipc: TX() has been purged, node left! [ 481.160244][ T220] tipc: TX() has been purged, node left! [ 481.350891][ T220] tipc: TX() has been purged, node left! 11:06:50 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:50 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0xfffffffffffffe21}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x48}], 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10) listen(r2, 0x2) listen(r2, 0x1001) 11:06:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020029000535d25a80648c63940d0324fc601000044002000000051a82c137153e670902038003001700d1bd", 0x33fe0}], 0x1}, 0x0) 11:06:50 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a16000000e8bd6efb250009000e0002003f0000ff050005001201", 0x33fe0}], 0x1}, 0x0) 11:06:50 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:50 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 481.499321][T27343] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 481.509762][ T220] tipc: TX() has been purged, node left! [ 481.519043][T27341] llc_conn_state_process: llc_conn_service failed [ 481.524204][T27342] IPVS: ftp: loaded support on port[0] = 21 [ 481.535636][ T220] tipc: TX() has been purged, node left! [ 481.549792][T27343] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 481.558648][ T220] tipc: TX() has been purged, node left! [ 481.563067][T27341] llc_conn_state_process: llc_conn_service failed [ 481.587456][ T220] tipc: TX() has been purged, node left! [ 481.615389][T27343] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.629514][ T220] tipc: TX() has been purged, node left! 11:06:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) [ 481.682837][ T220] tipc: TX() has been purged, node left! [ 481.713120][ T220] tipc: TX() has been purged, node left! 11:06:51 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fbac141410e949eb4be1977d48", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 481.742176][ T220] tipc: TX() has been purged, node left! [ 481.779344][ T220] tipc: TX() has been purged, node left! [ 481.827167][ T220] tipc: TX() has been purged, node left! [ 481.861306][ T220] tipc: TX() has been purged, node left! 11:06:51 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000340)='u', 0x1}], 0x1}, 0x0) [ 481.894087][ T220] tipc: TX() has been purged, node left! [ 481.949225][ T220] tipc: TX() has been purged, node left! [ 481.978331][ T220] tipc: TX() has been purged, node left! 11:06:51 executing program 4: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002d000517d25a80648c63940d1224fc60100002400a000200051a82c137153e670402098003001700d1bd", 0x33fe0}], 0x1}, 0x0) 11:06:51 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000002640)=""/4087, 0xff7}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000001440)=""/84, 0x54}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/132, 0x84}, {&(0x7f00000025c0)=""/248, 0xf8}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003780)=""/214, 0xd6}], 0x7}, 0x0) [ 482.076026][ T220] tipc: TX() has been purged, node left! [ 482.082574][ T220] tipc: TX() has been purged, node left! [ 482.108186][ T220] tipc: TX() has been purged, node left! 11:06:51 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xee}]}}, @time_exceeded={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}}}, 0x0) [ 482.154771][ T220] tipc: TX() has been purged, node left! [ 482.191370][ T220] tipc: TX() has been purged, node left! [ 482.249812][ T220] tipc: TX() has been purged, node left! [ 482.449742][ T220] tipc: TX() has been purged, node left! [ 482.599710][ T220] tipc: TX() has been purged, node left! [ 482.779692][ T220] tipc: TX() has been purged, node left! 11:06:52 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newchain={0x24, 0x2c, 0xe01, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 11:06:52 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xee}]}}, @time_exceeded={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}}}, 0x0) 11:06:52 executing program 2: syz_emit_ethernet(0xa4, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa188d3ea1dabc86dd6002290f006e120000000000000000000000000000000000ff02"], 0x0) 11:06:52 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:06:52 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 482.932835][T27402] IPVS: ftp: loaded support on port[0] = 21 [ 482.981725][ T220] tipc: TX() has been purged, node left! [ 483.020353][ T220] tipc: TX() has been purged, node left! 11:06:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240), 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x5}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 11:06:52 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @broadcast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 11:06:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x104}], 0x1) [ 483.026867][ T220] tipc: TX() has been purged, node left! [ 483.045048][ T220] tipc: TX() has been purged, node left! [ 483.083809][ T220] tipc: TX() has been purged, node left! [ 483.139039][ T220] tipc: TX() has been purged, node left! [ 483.179863][ T220] tipc: TX() has been purged, node left! [ 483.231881][T27429] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 483.257172][ T220] tipc: TX() has been purged, node left! [ 483.350330][ T220] tipc: TX() has been purged, node left! [ 483.356432][ T220] tipc: TX() has been purged, node left! 11:06:52 executing program 4: [ 483.444904][ T220] tipc: TX() has been purged, node left! [ 483.461388][ T220] tipc: TX() has been purged, node left! 11:06:52 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @broadcast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 483.511018][ T220] tipc: TX() has been purged, node left! [ 483.533321][ T220] tipc: TX() has been purged, node left! [ 483.571030][ T220] tipc: TX() has been purged, node left! [ 483.589819][ T220] tipc: TX() has been purged, node left! 11:06:52 executing program 4: [ 483.650170][ T220] tipc: TX() has been purged, node left! [ 483.656338][ T220] tipc: TX() has been purged, node left! [ 483.750230][ T220] tipc: TX() has been purged, node left! [ 483.756755][ T220] tipc: TX() has been purged, node left! [ 483.792833][ T220] tipc: TX() has been purged, node left! [ 484.152077][ T220] tipc: TX() has been purged, node left! [ 484.279566][ T220] tipc: TX() has been purged, node left! 11:06:53 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:53 executing program 4: 11:06:53 executing program 2: 11:06:53 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 484.322405][ T220] tipc: TX() has been purged, node left! [ 484.489674][ T220] tipc: TX() has been purged, node left! 11:06:53 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:06:53 executing program 4: 11:06:53 executing program 2: 11:06:53 executing program 0: [ 484.613472][T27480] IPVS: ftp: loaded support on port[0] = 21 11:06:54 executing program 0: 11:06:54 executing program 2: [ 484.679414][ T220] tipc: TX() has been purged, node left! [ 484.692734][ T220] tipc: TX() has been purged, node left! 11:06:54 executing program 4: [ 484.734671][ T220] tipc: TX() has been purged, node left! [ 484.773742][T27488] IPVS: ftp: loaded support on port[0] = 21 [ 484.792003][ T220] tipc: TX() has been purged, node left! [ 484.847738][ T220] tipc: TX() has been purged, node left! [ 484.870681][ T220] tipc: TX() has been purged, node left! 11:06:54 executing program 2: [ 484.901779][ T220] tipc: TX() has been purged, node left! [ 484.953191][ T220] tipc: TX() has been purged, node left! [ 484.989131][ T220] tipc: TX() has been purged, node left! 11:06:54 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:54 executing program 0: 11:06:54 executing program 4: [ 485.035789][ T220] tipc: TX() has been purged, node left! [ 485.068829][ T220] tipc: TX() has been purged, node left! [ 485.154256][ T220] tipc: TX() has been purged, node left! [ 485.237274][T27537] IPVS: ftp: loaded support on port[0] = 21 [ 485.284113][ T220] tipc: TX() has been purged, node left! [ 485.331668][ T220] tipc: TX() has been purged, node left! [ 485.338756][ T220] tipc: TX() has been purged, node left! [ 485.371156][ T220] tipc: TX() has been purged, node left! 11:06:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 485.549372][ T220] tipc: TX() has been purged, node left! [ 485.595501][T27568] IPVS: ftp: loaded support on port[0] = 21 [ 485.630309][ T220] tipc: TX() has been purged, node left! [ 485.636860][ T220] tipc: TX() has been purged, node left! [ 485.664465][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 0: 11:06:55 executing program 2: 11:06:55 executing program 4: 11:06:55 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:55 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 485.749398][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 3: 11:06:55 executing program 0: 11:06:55 executing program 2: 11:06:55 executing program 4: [ 485.878312][T27595] IPVS: ftp: loaded support on port[0] = 21 [ 485.889258][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 3: [ 485.961098][ T220] tipc: TX() has been purged, node left! [ 486.008272][ T220] tipc: TX() has been purged, node left! [ 486.027247][T27603] IPVS: ftp: loaded support on port[0] = 21 [ 486.044693][ T220] tipc: TX() has been purged, node left! [ 486.056629][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 0: [ 486.087131][ T220] tipc: TX() has been purged, node left! [ 486.115547][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 3: 11:06:55 executing program 2: [ 486.132329][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xfffffe2f}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 486.178415][ T220] tipc: TX() has been purged, node left! [ 486.220513][ T220] tipc: TX() has been purged, node left! [ 486.258534][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 486.302263][ T220] tipc: TX() has been purged, node left! [ 486.338387][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 486.388565][ T220] tipc: TX() has been purged, node left! [ 486.403701][T27648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.426611][ T220] tipc: TX() has been purged, node left! 11:06:55 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040), 0x8) 11:06:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000400)=@newchain={0x24, 0x28, 0xe01, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 486.456450][ T220] tipc: TX() has been purged, node left! [ 486.507831][ T220] tipc: TX() has been purged, node left! [ 486.530554][T27657] IPVS: ftp: loaded support on port[0] = 21 [ 486.546325][T27652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.584005][T27652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.597546][ T28] audit: type=1804 audit(1592564815.893:194): pid=27659 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/166/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 486.606299][T27667] IPVS: ftp: loaded support on port[0] = 21 [ 486.642239][ T220] tipc: TX() has been purged, node left! [ 486.669344][T27659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 486.679329][T27648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:06:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="b5"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x0) [ 486.697324][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.729477][ T220] tipc: TX() has been purged, node left! [ 486.736564][ T220] tipc: TX() has been purged, node left! [ 486.787395][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.805626][ T220] tipc: TX() has been purged, node left! 11:06:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:56 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 486.966063][ T220] tipc: TX() has been purged, node left! [ 486.975233][ T220] tipc: TX() has been purged, node left! 11:06:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 487.063608][T27719] IPVS: ftp: loaded support on port[0] = 21 11:06:56 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 487.110846][T27724] IPVS: ftp: loaded support on port[0] = 21 [ 487.190267][ T220] tipc: TX() has been purged, node left! [ 487.204579][T27728] IPVS: ftp: loaded support on port[0] = 21 [ 487.207183][T27726] IPVS: ftp: loaded support on port[0] = 21 [ 487.233397][ T220] tipc: TX() has been purged, node left! [ 487.262274][ T220] tipc: TX() has been purged, node left! 11:06:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 487.302861][T27745] IPVS: ftp: loaded support on port[0] = 21 [ 487.323034][ T220] tipc: TX() has been purged, node left! [ 487.397827][ T220] tipc: TX() has been purged, node left! [ 487.415308][ T220] tipc: TX() has been purged, node left! [ 487.472075][ T220] tipc: TX() has been purged, node left! [ 487.485134][ T220] tipc: TX() has been purged, node left! [ 487.517865][ T220] tipc: TX() has been purged, node left! [ 487.619830][ T220] tipc: TX() has been purged, node left! [ 487.696378][ T220] tipc: TX() has been purged, node left! 11:06:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 487.742960][ T220] tipc: TX() has been purged, node left! 11:06:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:57 executing program 4: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 487.918921][ T220] tipc: TX() has been purged, node left! 11:06:57 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 488.042229][T27848] IPVS: ftp: loaded support on port[0] = 21 [ 488.059040][ T220] tipc: TX() has been purged, node left! 11:06:57 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 488.129915][ T220] tipc: TX() has been purged, node left! [ 488.141045][ T220] tipc: TX() has been purged, node left! [ 488.150086][ T28] audit: type=1804 audit(1592564817.453:195): pid=27844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/168/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 488.192252][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.211759][ T220] tipc: TX() has been purged, node left! [ 488.236228][ T220] tipc: TX() has been purged, node left! [ 488.262111][ T220] tipc: TX() has been purged, node left! [ 488.310332][ T220] tipc: TX() has been purged, node left! [ 488.345805][ T220] tipc: TX() has been purged, node left! [ 488.381017][ T220] tipc: TX() has been purged, node left! [ 488.425584][ T220] tipc: TX() has been purged, node left! [ 488.511316][T27881] IPVS: ftp: loaded support on port[0] = 21 [ 488.568973][ T220] tipc: TX() has been purged, node left! [ 488.628075][T27885] IPVS: ftp: loaded support on port[0] = 21 [ 488.684661][ T220] tipc: TX() has been purged, node left! [ 488.692532][ T220] tipc: TX() has been purged, node left! [ 488.745760][ T220] tipc: TX() has been purged, node left! [ 488.776313][ T220] tipc: TX() has been purged, node left! [ 488.839828][ T220] tipc: TX() has been purged, node left! [ 488.876711][ T220] tipc: TX() has been purged, node left! 11:06:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 489.018869][ T220] tipc: TX() has been purged, node left! [ 489.037662][ T220] tipc: TX() has been purged, node left! 11:06:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:06:58 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 489.062567][ T220] tipc: TX() has been purged, node left! [ 489.104350][ T220] tipc: TX() has been purged, node left! [ 489.269810][ T220] tipc: TX() has been purged, node left! [ 489.297645][T27934] IPVS: ftp: loaded support on port[0] = 21 11:06:58 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 489.337375][ T28] audit: type=1804 audit(1592564818.633:196): pid=27931 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/169/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 489.364761][T27931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.392784][ T220] tipc: TX() has been purged, node left! [ 489.403016][ T220] tipc: TX() has been purged, node left! 11:06:58 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 489.434069][T27938] IPVS: ftp: loaded support on port[0] = 21 [ 489.458240][ T220] tipc: TX() has been purged, node left! [ 489.514244][ T220] tipc: TX() has been purged, node left! [ 489.565041][ T220] tipc: TX() has been purged, node left! [ 489.606546][ T220] tipc: TX() has been purged, node left! [ 489.649336][ T220] tipc: TX() has been purged, node left! [ 489.712920][ T220] tipc: TX() has been purged, node left! [ 489.750145][ T220] tipc: TX() has been purged, node left! 11:06:59 executing program 4: unshare(0x40000000) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 489.781530][ T220] tipc: TX() has been purged, node left! [ 489.821666][ T220] tipc: TX() has been purged, node left! [ 489.865534][T27973] IPVS: ftp: loaded support on port[0] = 21 [ 489.885911][ T220] tipc: TX() has been purged, node left! [ 489.981461][T27989] IPVS: ftp: loaded support on port[0] = 21 11:06:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 490.025899][ T220] tipc: TX() has been purged, node left! [ 490.063232][ T220] tipc: TX() has been purged, node left! [ 490.183700][ T220] tipc: TX() has been purged, node left! [ 490.190314][ T220] tipc: TX() has been purged, node left! [ 490.191506][T28008] IPVS: ftp: loaded support on port[0] = 21 [ 490.297298][ T220] tipc: TX() has been purged, node left! [ 490.346752][ T220] tipc: TX() has been purged, node left! 11:06:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 490.404597][ T220] tipc: TX() has been purged, node left! [ 490.437707][ T28] audit: type=1804 audit(1592564819.734:197): pid=28029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/170/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 490.492795][ T220] tipc: TX() has been purged, node left! [ 490.530609][ T220] tipc: TX() has been purged, node left! 11:06:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 490.571832][ T220] tipc: TX() has been purged, node left! 11:06:59 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 490.615935][ T220] tipc: TX() has been purged, node left! [ 490.642256][ T220] tipc: TX() has been purged, node left! [ 490.708811][ T220] tipc: TX() has been purged, node left! [ 490.827194][T28069] IPVS: ftp: loaded support on port[0] = 21 11:07:00 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 490.873265][ T28] audit: type=1804 audit(1592564820.174:198): pid=28068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/171/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 490.908632][ T220] tipc: TX() has been purged, node left! 11:07:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 490.988888][ T220] tipc: TX() has been purged, node left! [ 490.996788][ T220] tipc: TX() has been purged, node left! [ 491.043710][ T220] tipc: TX() has been purged, node left! 11:07:00 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 491.090610][ T220] tipc: TX() has been purged, node left! [ 491.098021][T28086] IPVS: ftp: loaded support on port[0] = 21 [ 491.120888][ T220] tipc: TX() has been purged, node left! [ 491.175577][ T220] tipc: TX() has been purged, node left! [ 491.201695][ T220] tipc: TX() has been purged, node left! [ 491.254478][ T220] tipc: TX() has been purged, node left! [ 491.285241][ T28] audit: type=1804 audit(1592564820.584:199): pid=28097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/172/cgroup.controllers" dev="sda1" ino=16178 res=1 [ 491.314804][ T220] tipc: TX() has been purged, node left! 11:07:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) [ 491.351893][ T220] tipc: TX() has been purged, node left! [ 491.382756][ T220] tipc: TX() has been purged, node left! [ 491.417396][T28115] IPVS: ftp: loaded support on port[0] = 21 [ 491.432302][ T220] tipc: TX() has been purged, node left! 11:07:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 491.475871][ T220] tipc: TX() has been purged, node left! [ 491.534318][ T220] tipc: TX() has been purged, node left! [ 491.587763][ T220] tipc: TX() has been purged, node left! [ 491.655745][ T220] tipc: TX() has been purged, node left! [ 491.688765][ T220] tipc: TX() has been purged, node left! [ 491.709842][T28146] IPVS: ftp: loaded support on port[0] = 21 [ 491.754842][ T220] tipc: TX() has been purged, node left! 11:07:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 11:07:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) [ 491.835954][ T220] tipc: TX() has been purged, node left! [ 491.879544][ T220] tipc: TX() has been purged, node left! 11:07:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 491.965643][ T220] tipc: TX() has been purged, node left! [ 491.974308][ T28] audit: type=1804 audit(1592564821.274:200): pid=28149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir850982898/syzkaller.cjI1N5/201/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 492.088731][ T220] tipc: TX() has been purged, node left! [ 492.108733][ T220] tipc: TX() has been purged, node left! 11:07:01 executing program 2: unshare(0x40000000) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) 11:07:01 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 492.322247][T28195] IPVS: ftp: loaded support on port[0] = 21 [ 492.338562][ T220] tipc: TX() has been purged, node left! [ 492.367325][T28197] IPVS: ftp: loaded support on port[0] = 21 [ 492.373201][T28199] IPVS: ftp: loaded support on port[0] = 21 [ 492.455146][ T220] tipc: TX() has been purged, node left! [ 492.474281][ T220] tipc: TX() has been purged, node left! 11:07:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 492.599836][ T220] tipc: TX() has been purged, node left! [ 492.606117][ T220] tipc: TX() has been purged, node left! [ 492.672479][T28225] IPVS: ftp: loaded support on port[0] = 21 [ 492.700989][ T220] tipc: TX() has been purged, node left! [ 492.744659][ T220] tipc: TX() has been purged, node left! 11:07:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 492.789076][ T220] tipc: TX() has been purged, node left! [ 492.845542][ T220] tipc: TX() has been purged, node left! [ 492.930471][ T28] audit: type=1804 audit(1592564822.234:201): pid=28255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/176/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 492.976353][ T220] tipc: TX() has been purged, node left! [ 492.983818][T28255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 493.145676][ T220] tipc: TX() has been purged, node left! [ 493.159592][ T220] tipc: TX() has been purged, node left! [ 493.216530][ T220] tipc: TX() has been purged, node left! 11:07:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 11:07:02 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 493.345245][T28302] IPVS: ftp: loaded support on port[0] = 21 11:07:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) 11:07:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 493.458567][ T220] tipc: TX() has been purged, node left! 11:07:02 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 493.539341][ T220] tipc: TX() has been purged, node left! [ 493.549082][ T220] tipc: TX() has been purged, node left! [ 493.552812][T28310] IPVS: ftp: loaded support on port[0] = 21 [ 493.663742][ T220] tipc: TX() has been purged, node left! [ 493.731359][ T220] tipc: TX() has been purged, node left! [ 493.739092][ T220] tipc: TX() has been purged, node left! [ 493.789800][ T220] tipc: TX() has been purged, node left! [ 493.810977][T28333] IPVS: ftp: loaded support on port[0] = 21 [ 493.811240][ T28] audit: type=1804 audit(1592564823.114:202): pid=28337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/177/cgroup.controllers" dev="sda1" ino=15703 res=1 [ 493.900898][ T220] tipc: TX() has been purged, node left! [ 493.912597][ T220] tipc: TX() has been purged, node left! 11:07:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 493.986894][ T220] tipc: TX() has been purged, node left! [ 493.999934][T28356] IPVS: ftp: loaded support on port[0] = 21 [ 494.050684][ T220] tipc: TX() has been purged, node left! [ 494.137298][ T220] tipc: TX() has been purged, node left! [ 494.167669][ T220] tipc: TX() has been purged, node left! [ 494.231464][ T220] tipc: TX() has been purged, node left! [ 494.257709][ T220] tipc: TX() has been purged, node left! 11:07:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 494.299710][ T220] tipc: TX() has been purged, node left! 11:07:03 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:03 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 494.342533][ T220] tipc: TX() has been purged, node left! 11:07:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 494.431558][ T220] tipc: TX() has been purged, node left! [ 494.437708][ T220] tipc: TX() has been purged, node left! [ 494.484699][ T28] audit: type=1804 audit(1592564823.784:203): pid=28409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/179/cgroup.controllers" dev="sda1" ino=16178 res=1 [ 494.515686][ T220] tipc: TX() has been purged, node left! [ 494.602168][T28421] IPVS: ftp: loaded support on port[0] = 21 [ 494.664777][T28424] IPVS: ftp: loaded support on port[0] = 21 [ 494.680703][ T220] tipc: TX() has been purged, node left! [ 494.695002][ T220] tipc: TX() has been purged, node left! [ 494.732217][T28429] IPVS: ftp: loaded support on port[0] = 21 [ 494.741976][ T220] tipc: TX() has been purged, node left! [ 494.785463][ T220] tipc: TX() has been purged, node left! [ 494.814226][T28439] IPVS: ftp: loaded support on port[0] = 21 [ 494.831243][ T220] tipc: TX() has been purged, node left! 11:07:04 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 494.865553][ T220] tipc: TX() has been purged, node left! [ 494.926496][ T220] tipc: TX() has been purged, node left! [ 494.981320][ T220] tipc: TX() has been purged, node left! 11:07:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 495.063859][ T220] tipc: TX() has been purged, node left! [ 495.114616][ T220] tipc: TX() has been purged, node left! [ 495.157290][ T220] tipc: TX() has been purged, node left! [ 495.199986][ T220] tipc: TX() has been purged, node left! [ 495.221184][ T220] tipc: TX() has been purged, node left! [ 495.260143][T28520] IPVS: ftp: loaded support on port[0] = 21 [ 495.268542][ T28] audit: type=1804 audit(1592564824.574:204): pid=28521 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/180/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 495.299722][ T220] tipc: TX() has been purged, node left! 11:07:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) [ 495.312007][ T220] tipc: TX() has been purged, node left! 11:07:04 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 495.354398][ T220] tipc: TX() has been purged, node left! [ 495.474842][ T220] tipc: TX() has been purged, node left! [ 495.487582][ T220] tipc: TX() has been purged, node left! [ 495.526364][T28545] IPVS: ftp: loaded support on port[0] = 21 [ 495.531336][T28551] IPVS: ftp: loaded support on port[0] = 21 11:07:04 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 495.571661][ T220] tipc: TX() has been purged, node left! 11:07:04 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) [ 495.658900][ T220] tipc: TX() has been purged, node left! [ 495.677455][ T220] tipc: TX() has been purged, node left! [ 495.718388][ T220] tipc: TX() has been purged, node left! [ 495.761474][ T220] tipc: TX() has been purged, node left! [ 495.811691][ T220] tipc: TX() has been purged, node left! [ 495.836353][ T220] tipc: TX() has been purged, node left! [ 495.874699][ T220] tipc: TX() has been purged, node left! [ 495.937242][T28598] IPVS: ftp: loaded support on port[0] = 21 11:07:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 11:07:05 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 496.048031][ T220] tipc: TX() has been purged, node left! [ 496.057400][ T220] tipc: TX() has been purged, node left! [ 496.096991][T28615] IPVS: ftp: loaded support on port[0] = 21 [ 496.117194][ T220] tipc: TX() has been purged, node left! 11:07:05 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 496.142829][ T220] tipc: TX() has been purged, node left! [ 496.196206][ T220] tipc: TX() has been purged, node left! [ 496.219819][T28628] IPVS: ftp: loaded support on port[0] = 21 [ 496.282300][T28636] IPVS: ftp: loaded support on port[0] = 21 [ 496.298424][ T220] tipc: TX() has been purged, node left! [ 496.310703][ T28] audit: type=1804 audit(1592564825.614:205): pid=28565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/181/cgroup.controllers" dev="sda1" ino=16381 res=1 11:07:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 496.356868][ T220] tipc: TX() has been purged, node left! [ 496.385349][ T220] tipc: TX() has been purged, node left! [ 496.440478][ T220] tipc: TX() has been purged, node left! [ 496.473432][ T220] tipc: TX() has been purged, node left! [ 496.512237][ T220] tipc: TX() has been purged, node left! [ 496.585215][ T220] tipc: TX() has been purged, node left! [ 496.603465][ T220] tipc: TX() has been purged, node left! [ 496.651446][T28695] IPVS: ftp: loaded support on port[0] = 21 [ 496.660414][ T220] tipc: TX() has been purged, node left! 11:07:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 11:07:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 496.732830][ T220] tipc: TX() has been purged, node left! [ 496.763669][ T220] tipc: TX() has been purged, node left! 11:07:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) [ 496.864194][ T220] tipc: TX() has been purged, node left! [ 496.958104][ T220] tipc: TX() has been purged, node left! [ 496.965665][ T220] tipc: TX() has been purged, node left! 11:07:06 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 497.002444][ T220] tipc: TX() has been purged, node left! [ 497.013783][T28739] IPVS: ftp: loaded support on port[0] = 21 [ 497.123831][T28749] IPVS: ftp: loaded support on port[0] = 21 [ 497.130855][ T220] tipc: TX() has been purged, node left! [ 497.146316][ T220] tipc: TX() has been purged, node left! [ 497.177377][ T220] tipc: TX() has been purged, node left! [ 497.209489][ T220] tipc: TX() has been purged, node left! [ 497.239018][T28758] IPVS: ftp: loaded support on port[0] = 21 [ 497.280831][ T220] tipc: TX() has been purged, node left! [ 497.291876][ T220] tipc: TX() has been purged, node left! [ 497.334211][ T220] tipc: TX() has been purged, node left! [ 497.366648][ T220] tipc: TX() has been purged, node left! [ 497.395961][ T220] tipc: TX() has been purged, node left! [ 497.451146][ T220] tipc: TX() has been purged, node left! [ 497.461920][ T220] tipc: TX() has been purged, node left! 11:07:06 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 497.503872][ T220] tipc: TX() has been purged, node left! [ 497.565292][T28796] IPVS: ftp: loaded support on port[0] = 21 [ 497.572142][ T220] tipc: TX() has been purged, node left! 11:07:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 497.631442][ T28] audit: type=1804 audit(1592564826.935:206): pid=28730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/182/cgroup.controllers" dev="sda1" ino=16178 res=1 [ 497.661580][ T220] tipc: TX() has been purged, node left! [ 497.671572][ T220] tipc: TX() has been purged, node left! 11:07:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) [ 497.720996][ T220] tipc: TX() has been purged, node left! [ 497.771095][ T220] tipc: TX() has been purged, node left! [ 497.804640][ T220] tipc: TX() has been purged, node left! 11:07:07 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 497.836950][T28833] IPVS: ftp: loaded support on port[0] = 21 [ 497.872535][ T220] tipc: TX() has been purged, node left! [ 497.912749][ T220] tipc: TX() has been purged, node left! [ 497.974385][ T220] tipc: TX() has been purged, node left! [ 497.979021][T28849] IPVS: ftp: loaded support on port[0] = 21 [ 498.014105][ T220] tipc: TX() has been purged, node left! [ 498.047248][T28859] IPVS: ftp: loaded support on port[0] = 21 [ 498.051980][T28856] IPVS: ftp: loaded support on port[0] = 21 [ 498.092133][ T220] tipc: TX() has been purged, node left! [ 498.144127][ T220] tipc: TX() has been purged, node left! [ 498.208670][ T220] tipc: TX() has been purged, node left! [ 498.272136][ T220] tipc: TX() has been purged, node left! [ 498.334685][ T220] tipc: TX() has been purged, node left! [ 498.399108][ T220] tipc: TX() has been purged, node left! 11:07:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:07 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) [ 498.470359][ T220] tipc: TX() has been purged, node left! [ 498.478198][ T220] tipc: TX() has been purged, node left! 11:07:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 498.613172][ T220] tipc: TX() has been purged, node left! [ 498.622877][ T28] audit: type=1804 audit(1592564827.925:207): pid=28947 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/184/cgroup.controllers" dev="sda1" ino=15782 res=1 11:07:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 11:07:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 498.731468][T28956] IPVS: ftp: loaded support on port[0] = 21 11:07:08 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 498.797590][ T220] tipc: TX() has been purged, node left! 11:07:08 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 498.838666][ T220] tipc: TX() has been purged, node left! [ 498.845711][ T220] tipc: TX() has been purged, node left! [ 498.846421][T28959] IPVS: ftp: loaded support on port[0] = 21 [ 498.893089][T28965] IPVS: ftp: loaded support on port[0] = 21 [ 498.916462][ T220] tipc: TX() has been purged, node left! 11:07:08 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100002a00) [ 498.940909][ T220] tipc: TX() has been purged, node left! [ 499.011061][ T220] tipc: TX() has been purged, node left! [ 499.045681][T28971] IPVS: ftp: loaded support on port[0] = 21 [ 499.060436][ T220] tipc: TX() has been purged, node left! [ 499.088085][ T220] tipc: TX() has been purged, node left! [ 499.112950][ T220] tipc: TX() has been purged, node left! [ 499.142852][ T220] tipc: TX() has been purged, node left! [ 499.180647][ T220] tipc: TX() has been purged, node left! 11:07:08 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100002a00) [ 499.236556][ T220] tipc: TX() has been purged, node left! 11:07:08 executing program 0: unshare(0x40000000) 11:07:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 11:07:08 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100002a00) 11:07:08 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) [ 499.540711][T29059] IPVS: ftp: loaded support on port[0] = 21 [ 499.559367][T29062] IPVS: ftp: loaded support on port[0] = 21 [ 499.620745][T29071] IPVS: ftp: loaded support on port[0] = 21 [ 499.746829][T29083] IPVS: ftp: loaded support on port[0] = 21 11:07:09 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 11:07:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:09 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) 11:07:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:09 executing program 0: unshare(0x0) [ 500.214771][T29168] IPVS: ftp: loaded support on port[0] = 21 [ 500.236877][T29171] IPVS: ftp: loaded support on port[0] = 21 [ 500.253320][T29170] IPVS: ftp: loaded support on port[0] = 21 11:07:09 executing program 5: unshare(0x40000000) 11:07:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:09 executing program 0: unshare(0x0) 11:07:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 500.450226][T29195] IPVS: ftp: loaded support on port[0] = 21 11:07:09 executing program 0: unshare(0x0) 11:07:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 11:07:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:10 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) [ 500.882669][T29277] IPVS: ftp: loaded support on port[0] = 21 11:07:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 500.935958][T29278] IPVS: ftp: loaded support on port[0] = 21 11:07:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 501.004958][T29286] IPVS: ftp: loaded support on port[0] = 21 11:07:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) 11:07:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 501.171179][T29320] IPVS: ftp: loaded support on port[0] = 21 11:07:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 501.312091][T29343] IPVS: ftp: loaded support on port[0] = 21 11:07:10 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 11:07:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) [ 501.636626][T29406] IPVS: ftp: loaded support on port[0] = 21 [ 501.639038][T29405] IPVS: ftp: loaded support on port[0] = 21 11:07:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:11 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 501.732501][T29416] IPVS: ftp: loaded support on port[0] = 21 11:07:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) [ 501.854609][T29435] IPVS: ftp: loaded support on port[0] = 21 11:07:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:11 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 502.141621][T29477] IPVS: ftp: loaded support on port[0] = 21 [ 502.214029][T29508] IPVS: ftp: loaded support on port[0] = 21 11:07:11 executing program 4: unshare(0x40000000) [ 502.265354][ T28] audit: type=1804 audit(1592564831.565:208): pid=29518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/199/cgroup.controllers" dev="sda1" ino=15799 res=1 11:07:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:11 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 502.451700][T29547] IPVS: ftp: loaded support on port[0] = 21 [ 502.526322][T29564] IPVS: ftp: loaded support on port[0] = 21 11:07:11 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) 11:07:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 11:07:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 502.788036][T29605] IPVS: ftp: loaded support on port[0] = 21 [ 502.802253][T29606] IPVS: ftp: loaded support on port[0] = 21 11:07:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:07:12 executing program 4: unshare(0x0) 11:07:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) [ 503.089974][T29653] IPVS: ftp: loaded support on port[0] = 21 [ 503.187496][T29662] IPVS: ftp: loaded support on port[0] = 21 11:07:12 executing program 4: unshare(0x0) 11:07:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 11:07:12 executing program 4: unshare(0x0) [ 503.538622][ T28] audit: type=1804 audit(1592564832.845:209): pid=29620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/201/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 503.611229][T29725] IPVS: ftp: loaded support on port[0] = 21 11:07:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) 11:07:13 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) [ 503.902716][T29755] IPVS: ftp: loaded support on port[0] = 21 [ 504.031623][T29770] IPVS: ftp: loaded support on port[0] = 21 11:07:13 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 504.141713][T29786] IPVS: ftp: loaded support on port[0] = 21 11:07:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) [ 504.349417][T29815] IPVS: ftp: loaded support on port[0] = 21 [ 504.425505][T29831] IPVS: ftp: loaded support on port[0] = 21 11:07:13 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) 11:07:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 504.780686][ T28] audit: type=1804 audit(1592564834.086:210): pid=29764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir508541861/syzkaller.OoCMZC/195/cgroup.controllers" dev="sda1" ino=15806 res=1 11:07:14 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 11:07:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 504.853487][T29894] IPVS: ftp: loaded support on port[0] = 21 [ 504.914723][ T28] audit: type=1804 audit(1592564834.126:211): pid=29787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/202/cgroup.controllers" dev="sda1" ino=15857 res=1 11:07:14 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 504.958222][T29897] IPVS: ftp: loaded support on port[0] = 21 [ 505.042750][ T28] audit: type=1800 audit(1592564834.126:212): pid=29787 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15857 res=0 [ 505.168046][T29913] IPVS: ftp: loaded support on port[0] = 21 11:07:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) [ 505.384401][T29955] IPVS: ftp: loaded support on port[0] = 21 11:07:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:14 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:14 executing program 2: unshare(0x40000000) [ 505.645878][T29989] IPVS: ftp: loaded support on port[0] = 21 [ 505.700722][T29993] IPVS: ftp: loaded support on port[0] = 21 [ 505.719517][T29995] IPVS: ftp: loaded support on port[0] = 21 [ 505.833438][T30010] IPVS: ftp: loaded support on port[0] = 21 [ 506.056216][ T28] audit: type=1800 audit(1592564835.356:213): pid=29956 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15745 res=0 11:07:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:15 executing program 2: unshare(0x0) 11:07:15 executing program 1: unshare(0x40000000) 11:07:15 executing program 2: unshare(0x0) 11:07:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 506.492109][T30100] IPVS: ftp: loaded support on port[0] = 21 11:07:15 executing program 2: unshare(0x0) [ 506.614594][T30110] IPVS: ftp: loaded support on port[0] = 21 [ 506.729811][T30126] IPVS: ftp: loaded support on port[0] = 21 [ 506.738537][ T28] audit: type=1804 audit(1592564836.036:214): pid=30107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir051373937/syzkaller.GQc4Sn/213/cgroup.controllers" dev="sda1" ino=15819 res=1 [ 506.780932][T30107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:07:16 executing program 2: unshare(0x40000000) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 507.104373][T30172] IPVS: ftp: loaded support on port[0] = 21 [ 507.352857][ T28] audit: type=1800 audit(1592564836.646:215): pid=30119 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15874 res=0 11:07:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:16 executing program 1: unshare(0x40000000) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:16 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 507.599548][T30209] IPVS: ftp: loaded support on port[0] = 21 [ 507.682782][T30213] IPVS: ftp: loaded support on port[0] = 21 11:07:17 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:17 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 508.506245][ T28] audit: type=1800 audit(1592564837.796:216): pid=30224 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15938 res=0 11:07:17 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 508.557797][T30274] IPVS: ftp: loaded support on port[0] = 21 [ 508.752568][T30283] IPVS: ftp: loaded support on port[0] = 21 [ 508.776376][ T28] audit: type=1800 audit(1592564838.066:217): pid=30250 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16003 res=0 11:07:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 508.978580][T30304] IPVS: ftp: loaded support on port[0] = 21 [ 509.377554][T30352] IPVS: ftp: loaded support on port[0] = 21 11:07:18 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 509.784168][T30374] IPVS: ftp: loaded support on port[0] = 21 [ 509.805499][ T28] audit: type=1800 audit(1592564839.096:218): pid=30319 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16035 res=0 11:07:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:19 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 510.452033][ T28] audit: type=1804 audit(1592564839.746:219): pid=30412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/207/cgroup.controllers" dev="sda1" ino=15847 res=1 [ 510.634232][T30415] IPVS: ftp: loaded support on port[0] = 21 11:07:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:20 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 511.053452][ T28] audit: type=1804 audit(1592564840.346:220): pid=30439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/208/cgroup.controllers" dev="sda1" ino=15814 res=1 [ 511.064649][T30442] IPVS: ftp: loaded support on port[0] = 21 11:07:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) [ 511.333968][T30451] IPVS: ftp: loaded support on port[0] = 21 11:07:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 511.549013][T30465] IPVS: ftp: loaded support on port[0] = 21 11:07:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 511.658133][ T28] audit: type=1804 audit(1592564840.956:221): pid=30483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/209/cgroup.controllers" dev="sda1" ino=15938 res=1 11:07:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 512.124485][ T28] audit: type=1804 audit(1592564841.416:222): pid=30521 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir051373937/syzkaller.GQc4Sn/216/cgroup.controllers" dev="sda1" ino=16129 res=1 [ 512.308874][ T28] audit: type=1804 audit(1592564841.606:223): pid=30530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/210/cgroup.controllers" dev="sda1" ino=15938 res=1 11:07:22 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 512.961011][T30553] IPVS: ftp: loaded support on port[0] = 21 [ 512.990168][T30555] IPVS: ftp: loaded support on port[0] = 21 [ 513.074899][ T28] audit: type=1804 audit(1592564842.367:224): pid=30557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/211/cgroup.controllers" dev="sda1" ino=16097 res=1 11:07:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 513.321747][ T28] audit: type=1804 audit(1592564842.617:225): pid=30562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/371/cgroup.controllers" dev="sda1" ino=15840 res=1 [ 513.550224][ T28] audit: type=1804 audit(1592564842.847:226): pid=30566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/212/cgroup.controllers" dev="sda1" ino=16081 res=1 11:07:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 514.081746][ T28] audit: type=1804 audit(1592564843.377:227): pid=30574 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/213/cgroup.controllers" dev="sda1" ino=16194 res=1 [ 514.170865][ T28] audit: type=1804 audit(1592564843.437:228): pid=30572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/372/cgroup.controllers" dev="sda1" ino=15840 res=1 11:07:25 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x0, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 516.221204][ T28] audit: type=1804 audit(1592564845.517:229): pid=30592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/214/cgroup.controllers" dev="sda1" ino=15847 res=1 [ 516.260970][T30596] IPVS: ftp: loaded support on port[0] = 21 [ 516.331107][ T28] audit: type=1804 audit(1592564845.597:230): pid=30591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir123146171/syzkaller.6TuEAg/243/cgroup.controllers" dev="sda1" ino=15838 res=1 [ 516.485147][ T28] audit: type=1804 audit(1592564845.627:231): pid=30593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/373/cgroup.controllers" dev="sda1" ino=15849 res=1 11:07:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 516.948344][ T28] audit: type=1804 audit(1592564846.247:232): pid=30623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/215/cgroup.controllers" dev="sda1" ino=15832 res=1 11:07:28 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x0, 0x0, 0x0) write(r2, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:28 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 519.210118][T30643] IPVS: ftp: loaded support on port[0] = 21 [ 519.340718][T30657] IPVS: ftp: loaded support on port[0] = 21 [ 519.359201][T30659] IPVS: ftp: loaded support on port[0] = 21 11:07:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 519.586276][ T28] audit: type=1804 audit(1592564848.887:233): pid=30658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/374/cgroup.controllers" dev="sda1" ino=16338 res=1 [ 519.639086][T30692] IPVS: ftp: loaded support on port[0] = 21 [ 519.796540][ T28] audit: type=1804 audit(1592564849.097:234): pid=30712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/217/cgroup.controllers" dev="sda1" ino=15865 res=1 11:07:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 520.279600][ T28] audit: type=1804 audit(1592564849.577:235): pid=30748 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/218/cgroup.controllers" dev="sda1" ino=15868 res=1 [ 520.400435][T30753] IPVS: ftp: loaded support on port[0] = 21 11:07:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 521.252367][ T28] audit: type=1804 audit(1592564850.548:236): pid=30792 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/219/cgroup.controllers" dev="sda1" ino=15868 res=1 11:07:30 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 521.574271][T30800] IPVS: ftp: loaded support on port[0] = 21 [ 521.602416][T30801] IPVS: ftp: loaded support on port[0] = 21 [ 521.681142][ T28] audit: type=1804 audit(1592564850.978:237): pid=30799 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir850982898/syzkaller.cjI1N5/225/cgroup.controllers" dev="sda1" ino=16209 res=1 11:07:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 522.085154][T30847] IPVS: ftp: loaded support on port[0] = 21 [ 522.106330][ T28] audit: type=1804 audit(1592564851.408:238): pid=30843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/220/cgroup.controllers" dev="sda1" ino=16225 res=1 11:07:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 522.551407][ T28] audit: type=1804 audit(1592564851.848:239): pid=30864 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir850982898/syzkaller.cjI1N5/226/cgroup.controllers" dev="sda1" ino=16209 res=1 [ 522.728248][T30880] IPVS: ftp: loaded support on port[0] = 21 11:07:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:32 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 523.366869][ T28] audit: type=1804 audit(1592564852.668:240): pid=30918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/221/cgroup.controllers" dev="sda1" ino=15862 res=1 [ 523.478364][T30922] IPVS: ftp: loaded support on port[0] = 21 11:07:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:33 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601020000800000"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 523.950895][T30944] IPVS: ftp: loaded support on port[0] = 21 [ 524.001076][T30953] IPVS: ftp: loaded support on port[0] = 21 [ 524.023853][ T28] audit: type=1804 audit(1592564853.318:241): pid=30948 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/222/cgroup.controllers" dev="sda1" ino=15863 res=1 [ 524.056865][T30948] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 524.228263][ T28] audit: type=1804 audit(1592564853.528:242): pid=30971 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir051373937/syzkaller.GQc4Sn/220/cgroup.controllers" dev="sda1" ino=15876 res=1 11:07:34 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:34 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601020000800000"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 524.939379][T31006] IPVS: ftp: loaded support on port[0] = 21 [ 525.003765][T31011] IPVS: ftp: loaded support on port[0] = 21 [ 525.049191][ T28] audit: type=1804 audit(1592564854.348:243): pid=31010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/223/cgroup.controllers" dev="sda1" ino=15872 res=1 [ 525.094683][T31010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:34 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601020000800000"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 525.688701][T31073] IPVS: ftp: loaded support on port[0] = 21 [ 525.789501][ T28] audit: type=1804 audit(1592564855.088:244): pid=31074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/224/cgroup.controllers" dev="sda1" ino=15877 res=1 [ 525.824090][T31074] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:35 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 526.377173][T31107] IPVS: ftp: loaded support on port[0] = 21 [ 526.411734][T31108] IPVS: ftp: loaded support on port[0] = 21 [ 526.620649][ T28] audit: type=1804 audit(1592564855.918:245): pid=31121 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/225/cgroup.controllers" dev="sda1" ino=15878 res=1 [ 526.666247][T31116] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601020000800000"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 527.252978][ T28] audit: type=1804 audit(1592564856.548:246): pid=31165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/378/cgroup.controllers" dev="sda1" ino=15862 res=1 [ 527.302272][T31165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 527.361932][ T28] audit: type=1804 audit(1592564856.658:247): pid=31171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/226/cgroup.controllers" dev="sda1" ino=15761 res=1 [ 527.393532][T31171] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.562890][T31176] IPVS: ftp: loaded support on port[0] = 21 11:07:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:37 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 528.031086][T31200] IPVS: ftp: loaded support on port[0] = 21 11:07:37 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 528.133488][ T28] audit: type=1804 audit(1592564857.428:248): pid=31203 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/227/cgroup.controllers" dev="sda1" ino=15863 res=1 [ 528.154945][T31205] IPVS: ftp: loaded support on port[0] = 21 [ 528.170776][T31203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 528.414996][T31220] IPVS: ftp: loaded support on port[0] = 21 11:07:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 528.798377][T31260] IPVS: ftp: loaded support on port[0] = 21 [ 528.949616][ T28] audit: type=1804 audit(1592564858.249:249): pid=31277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/228/cgroup.controllers" dev="sda1" ino=15883 res=1 [ 528.987345][T31277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 529.505001][ T28] audit: type=1804 audit(1592564858.809:250): pid=31310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/229/cgroup.controllers" dev="sda1" ino=15883 res=1 [ 529.541891][T31310] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 529.728978][T31323] IPVS: ftp: loaded support on port[0] = 21 11:07:39 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 530.165690][T31345] IPVS: ftp: loaded support on port[0] = 21 11:07:39 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 530.336183][ T28] audit: type=1804 audit(1592564859.639:251): pid=31356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/230/cgroup.controllers" dev="sda1" ino=15883 res=1 [ 530.367375][T31356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:39 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:39 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 530.642433][T31374] IPVS: ftp: loaded support on port[0] = 21 11:07:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 530.849356][T31389] IPVS: ftp: loaded support on port[0] = 21 [ 530.941001][T31399] IPVS: ftp: loaded support on port[0] = 21 [ 530.951458][ T28] audit: type=1804 audit(1592564860.259:252): pid=31403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/231/cgroup.controllers" dev="sda1" ino=15897 res=1 11:07:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 531.419027][ T28] audit: type=1804 audit(1592564860.719:253): pid=31454 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/232/cgroup.controllers" dev="sda1" ino=15897 res=1 [ 531.446522][T31454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:07:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 531.820246][T31474] IPVS: ftp: loaded support on port[0] = 21 11:07:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:07:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 532.609478][ T28] audit: type=1804 audit(1592564861.909:254): pid=31523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/381/cgroup.controllers" dev="sda1" ino=15912 res=1 [ 532.654173][T31523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:07:42 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 533.091392][T31537] IPVS: ftp: loaded support on port[0] = 21 11:07:42 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 533.185796][T31547] IPVS: ftp: loaded support on port[0] = 21 11:07:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 533.369558][T31558] IPVS: ftp: loaded support on port[0] = 21 [ 533.487562][ T28] audit: type=1804 audit(1592564862.789:255): pid=31569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/237/cgroup.controllers" dev="sda1" ino=15883 res=1 11:07:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 533.599792][T31581] IPVS: ftp: loaded support on port[0] = 21 11:07:42 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 533.883537][T31622] IPVS: ftp: loaded support on port[0] = 21 [ 533.884700][ T28] audit: type=1804 audit(1592564863.189:256): pid=31614 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/238/cgroup.controllers" dev="sda1" ino=15917 res=1 11:07:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) [ 534.362587][ T28] audit: type=1804 audit(1592564863.659:257): pid=31663 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/239/cgroup.controllers" dev="sda1" ino=15917 res=1 11:07:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) [ 534.658708][ T28] audit: type=1804 audit(1592564863.959:258): pid=31678 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/240/cgroup.controllers" dev="sda1" ino=15933 res=1 11:07:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) [ 535.075776][ T28] audit: type=1804 audit(1592564864.379:259): pid=31688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/241/cgroup.controllers" dev="sda1" ino=15933 res=1 11:07:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) 11:07:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100002a00) 11:07:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:44 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 535.485914][ T28] audit: type=1804 audit(1592564864.789:260): pid=31697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/242/cgroup.controllers" dev="sda1" ino=15787 res=1 [ 535.610530][T31704] IPVS: ftp: loaded support on port[0] = 21 [ 535.637818][T31706] IPVS: ftp: loaded support on port[0] = 21 [ 535.644347][ T28] audit: type=1804 audit(1592564864.949:261): pid=31699 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir850982898/syzkaller.cjI1N5/232/cgroup.controllers" dev="sda1" ino=15687 res=1 11:07:45 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 11:07:45 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:45 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 535.909429][ T28] audit: type=1804 audit(1592564865.209:262): pid=31712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/243/cgroup.controllers" dev="sda1" ino=15687 res=1 [ 535.986490][T31730] IPVS: ftp: loaded support on port[0] = 21 11:07:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) [ 536.033624][T31734] IPVS: ftp: loaded support on port[0] = 21 [ 536.078953][T31737] IPVS: ftp: loaded support on port[0] = 21 [ 536.363339][ T28] audit: type=1804 audit(1592564865.669:263): pid=31767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/244/cgroup.controllers" dev="sda1" ino=15778 res=1 11:07:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) [ 536.692044][ T28] audit: type=1804 audit(1592564865.989:264): pid=31798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir149029190/syzkaller.elG3Io/245/cgroup.controllers" dev="sda1" ino=15778 res=1 11:07:46 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 537.245073][T31813] IPVS: ftp: loaded support on port[0] = 21 11:07:48 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 539.574641][T31847] IPVS: ftp: loaded support on port[0] = 21 [ 539.670963][T31858] IPVS: ftp: loaded support on port[0] = 21 11:07:50 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:50 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x0, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 541.270127][T31947] IPVS: ftp: loaded support on port[0] = 21 [ 541.289144][T31945] IPVS: ftp: loaded support on port[0] = 21 11:07:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 543.069726][T32011] IPVS: ftp: loaded support on port[0] = 21 11:07:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x0, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:54 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:54 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:54 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 545.588081][T32055] IPVS: ftp: loaded support on port[0] = 21 [ 545.598573][T32056] IPVS: ftp: loaded support on port[0] = 21 [ 545.615654][T32057] IPVS: ftp: loaded support on port[0] = 21 [ 545.619955][T32058] IPVS: ftp: loaded support on port[0] = 21 [ 545.639876][T32059] IPVS: ftp: loaded support on port[0] = 21 [ 545.907362][T32095] IPVS: ftp: loaded support on port[0] = 21 11:07:56 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:56 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:56 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 547.723926][T32227] IPVS: ftp: loaded support on port[0] = 21 11:07:57 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 547.891028][T32234] IPVS: ftp: loaded support on port[0] = 21 [ 547.926315][T32238] IPVS: ftp: loaded support on port[0] = 21 [ 547.956699][T32245] IPVS: ftp: loaded support on port[0] = 21 [ 548.055651][T32252] IPVS: ftp: loaded support on port[0] = 21 [ 548.090509][T32260] IPVS: ftp: loaded support on port[0] = 21 [ 549.195584][T32246] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:07:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:59 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:59 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:07:59 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 11:07:59 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:07:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'macsec0\x00', {}, 0x401}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000003c0)=0x7fff, 0x4) [ 549.958546][T32396] IPVS: ftp: loaded support on port[0] = 21 [ 550.036460][T32398] IPVS: ftp: loaded support on port[0] = 21 [ 550.065486][T32403] IPVS: ftp: loaded support on port[0] = 21 [ 550.065946][T32401] IPVS: ftp: loaded support on port[0] = 21 [ 550.215178][T32421] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 550.235649][T32417] IPVS: ftp: loaded support on port[0] = 21 11:08:00 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 551.158840][T32519] IPVS: ftp: loaded support on port[0] = 21 [ 551.262583][T32404] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 551.296558][T32422] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 11:08:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:01 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 11:08:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:01 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) [ 551.956244][T32557] IPVS: ftp: loaded support on port[0] = 21 [ 551.960912][T32556] IPVS: ftp: loaded support on port[0] = 21 [ 552.059615][T32561] IPVS: ftp: loaded support on port[0] = 21 [ 552.199471][T32568] IPVS: ftp: loaded support on port[0] = 21 11:08:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 552.722222][T32636] IPVS: ftp: loaded support on port[0] = 21 11:08:02 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 553.441356][T32562] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 553.693620][T32687] IPVS: ftp: loaded support on port[0] = 21 [ 553.804868][T32690] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:08:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:03 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) r2 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:03 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 554.253264][T32715] IPVS: ftp: loaded support on port[0] = 21 [ 554.380245][T32718] IPVS: ftp: loaded support on port[0] = 21 11:08:03 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 554.596370][T32728] IPVS: ftp: loaded support on port[0] = 21 [ 554.637660][T32737] IPVS: ftp: loaded support on port[0] = 21 [ 554.906197][T32762] IPVS: ftp: loaded support on port[0] = 21 11:08:04 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 555.870384][T32736] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 556.209352][T32762] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 11:08:05 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) r2 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 556.337884][ T381] IPVS: ftp: loaded support on port[0] = 21 11:08:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) r2 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xffffff35, @private0={0xfc, 0x0, [], 0x1}, 0x5}, 0xfffffffffffffe1a) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0x7) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000003c0)=0x7fff, 0x4) [ 556.697978][ T398] IPVS: ftp: loaded support on port[0] = 21 11:08:06 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 556.945318][ T412] IPVS: ftp: loaded support on port[0] = 21 [ 556.974748][ T421] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 557.063679][ T428] IPVS: ftp: loaded support on port[0] = 21 11:08:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000017c0)={r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x28, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x8040) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0, 0x5}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000003c0)=0x7fff, 0x4) [ 557.283554][ T452] IPVS: ftp: loaded support on port[0] = 21 [ 557.298237][ T460] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 557.351668][ T467] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:08:06 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 557.787149][ T504] IPVS: ftp: loaded support on port[0] = 21 11:08:07 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 558.236548][ T428] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 558.539018][ T542] IPVS: ftp: loaded support on port[0] = 21 11:08:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:08 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 559.090016][ T553] IPVS: ftp: loaded support on port[0] = 21 [ 559.139552][ T554] IPVS: ftp: loaded support on port[0] = 21 [ 559.256151][ T559] IPVS: ftp: loaded support on port[0] = 21 [ 559.603643][ T543] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 560.018654][ T555] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 11:08:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 561.586252][ T579] IPVS: ftp: loaded support on port[0] = 21 [ 561.674654][ T583] IPVS: ftp: loaded support on port[0] = 21 11:08:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 563.052947][ T635] IPVS: ftp: loaded support on port[0] = 21 [ 563.210413][ T642] IPVS: ftp: loaded support on port[0] = 21 [ 564.032103][ T635] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 564.260873][ T642] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 11:08:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) socket(0x10, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) [ 564.846676][ T691] IPVS: ftp: loaded support on port[0] = 21 [ 565.097370][ T704] IPVS: ftp: loaded support on port[0] = 21 [ 565.829766][ T692] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:08:15 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 566.557339][ T751] IPVS: ftp: loaded support on port[0] = 21 11:08:16 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 566.977951][ T776] IPVS: ftp: loaded support on port[0] = 21 [ 567.479502][ T752] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 567.767070][ T776] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 11:08:17 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:17 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:17 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:17 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 11:08:17 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 568.445385][ T814] IPVS: ftp: loaded support on port[0] = 21 [ 568.488330][ T819] IPVS: ftp: loaded support on port[0] = 21 [ 568.513616][ T820] IPVS: ftp: loaded support on port[0] = 21 [ 568.535942][ T818] IPVS: ftp: loaded support on port[0] = 21 [ 568.554526][ T822] IPVS: ftp: loaded support on port[0] = 21 [ 568.789571][ T850] IPVS: ftp: loaded support on port[0] = 21 [ 569.814897][ T823] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 569.904534][ T824] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 569.982538][ T826] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 570.192482][ T856] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:08:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="890538e4", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f00000003c0)=0x7fff, 0x4) 11:08:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f2, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11:08:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) socket(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r5, 0x0, 0x100000001) 11:08:19 executing program 4 (fault-call:6 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:08:19 executing program 2 (fault-call:0 fault-nth:0): unshare(0x40000000) [ 570.690463][ T990] IPVS: ftp: loaded support on port[0] = 21 11:08:20 executing program 3 (fault-call:0 fault-nth:0): unshare(0x40000000) [ 570.864864][ T28] audit: type=1804 audit(1592564900.173:265): pid=1002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/395/cgroup.controllers" dev="sda1" ino=16040 res=1 [ 570.868727][ T1002] FAULT_INJECTION: forcing a failure. [ 570.868727][ T1002] name failslab, interval 1, probability 0, space 0, times 1 [ 570.936976][ T1018] FAULT_INJECTION: forcing a failure. [ 570.936976][ T1018] name failslab, interval 1, probability 0, space 0, times 1 [ 570.975645][ T1018] CPU: 0 PID: 1018 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 570.983932][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.994036][ T1018] Call Trace: [ 570.997488][ T1018] dump_stack+0x188/0x20d [ 571.001922][ T1018] should_fail.cold+0x5/0xa [ 571.006515][ T1018] ? lock_downgrade+0x840/0x840 [ 571.011393][ T1018] ? fault_create_debugfs_attr+0x140/0x140 [ 571.017309][ T1018] should_failslab+0x5/0xf [ 571.021815][ T1018] kmem_cache_alloc+0x29b/0x740 [ 571.026689][ T1018] ? lock_downgrade+0x840/0x840 [ 571.031667][ T1018] ? cap_capable+0x1eb/0x250 [ 571.036393][ T1018] create_new_namespaces+0x30/0xb30 [ 571.041628][ T1018] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 571.047360][ T1018] ksys_unshare+0x43d/0x8e0 [ 571.051888][ T1018] ? walk_process_tree+0x2c0/0x2c0 [ 571.057075][ T1018] ? fput_many+0x2f/0x1a0 [ 571.061434][ T1018] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 571.067496][ T1018] ? do_syscall_64+0x21/0x7d0 [ 571.072200][ T1018] __x64_sys_unshare+0x2d/0x40 [ 571.076993][ T1018] do_syscall_64+0xf6/0x7d0 [ 571.081677][ T1018] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 571.087683][ T1018] RIP: 0033:0x45ca59 [ 571.091592][ T1018] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 571.111204][ T1018] RSP: 002b:00007f498d40dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 571.119642][ T1018] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 571.127632][ T1018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 571.135623][ T1018] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 571.143619][ T1018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 571.151606][ T1018] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007f498d40e6d4 [ 571.174912][ T28] audit: type=1804 audit(1592564900.363:266): pid=1021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir508541861/syzkaller.OoCMZC/218/cgroup.controllers" dev="sda1" ino=15906 res=1 [ 571.246063][ T1025] FAULT_INJECTION: forcing a failure. [ 571.246063][ T1025] name failslab, interval 1, probability 0, space 0, times 1 [ 571.249087][ T1002] CPU: 1 PID: 1002 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 571.266960][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.277028][ T1002] Call Trace: [ 571.280338][ T1002] dump_stack+0x188/0x20d [ 571.284694][ T1002] should_fail.cold+0x5/0xa [ 571.289221][ T1002] ? lock_downgrade+0x840/0x840 [ 571.294095][ T1002] ? fault_create_debugfs_attr+0x140/0x140 [ 571.299936][ T1002] should_failslab+0x5/0xf [ 571.304380][ T1002] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 571.309862][ T1002] ? aa_file_perm+0x5be/0x14d0 [ 571.314646][ T1002] ? __lock_acquire+0xc6c/0x4a70 [ 571.319658][ T1002] alloc_pipe_info+0x10a/0x4f0 [ 571.324558][ T1002] splice_direct_to_actor+0x777/0x980 [ 571.330027][ T1002] ? debug_smp_processor_id+0x2f/0x185 [ 571.335498][ T1002] ? do_splice_from+0x110/0x110 [ 571.340367][ T1002] ? do_splice_to+0x170/0x170 [ 571.345074][ T1002] do_splice_direct+0x1b4/0x280 [ 571.350035][ T1002] ? splice_direct_to_actor+0x980/0x980 [ 571.355677][ T1002] do_sendfile+0x555/0xc50 [ 571.360121][ T1002] ? do_compat_pwritev64+0x1b0/0x1b0 [ 571.365412][ T1002] ? wait_for_completion+0x270/0x270 [ 571.370750][ T1002] ? __sb_end_write+0x101/0x1d0 [ 571.375615][ T1002] ? vfs_write+0x161/0x5d0 [ 571.380054][ T1002] __x64_sys_sendfile64+0x1cc/0x210 [ 571.385303][ T1002] ? __ia32_sys_sendfile+0x220/0x220 [ 571.390607][ T1002] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 571.396605][ T1002] ? do_syscall_64+0x21/0x7d0 [ 571.401294][ T1002] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 571.407314][ T1002] do_syscall_64+0xf6/0x7d0 [ 571.411872][ T1002] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 571.417783][ T1002] RIP: 0033:0x45ca59 [ 571.421700][ T1002] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:08:20 executing program 5 (fault-call:0 fault-nth:0): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 571.441579][ T1002] RSP: 002b:00007fd743b7cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 571.450033][ T1002] RAX: ffffffffffffffda RBX: 00000000004fcf60 RCX: 000000000045ca59 [ 571.458019][ T1002] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 571.466006][ T1002] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 571.473992][ T1002] R10: 0000000100002a00 R11: 0000000000000246 R12: 0000000000000006 [ 571.481971][ T1002] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007fd743b7d6d4 [ 571.490030][ T1025] CPU: 0 PID: 1025 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 571.498287][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.508353][ T1025] Call Trace: [ 571.511666][ T1025] dump_stack+0x188/0x20d [ 571.516021][ T1025] should_fail.cold+0x5/0xa [ 571.520545][ T1025] ? lock_downgrade+0x840/0x840 [ 571.525420][ T1025] ? fault_create_debugfs_attr+0x140/0x140 [ 571.531255][ T1025] should_failslab+0x5/0xf [ 571.535688][ T1025] kmem_cache_alloc+0x29b/0x740 [ 571.540557][ T1025] ? lock_downgrade+0x840/0x840 [ 571.545434][ T1025] ? cap_capable+0x1eb/0x250 [ 571.550045][ T1025] create_new_namespaces+0x30/0xb30 [ 571.555274][ T1025] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 571.560936][ T1025] ksys_unshare+0x43d/0x8e0 [ 571.565470][ T1025] ? walk_process_tree+0x2c0/0x2c0 [ 571.570607][ T1025] ? fput_many+0x2f/0x1a0 [ 571.574965][ T1025] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 571.580970][ T1025] ? do_syscall_64+0x21/0x7d0 [ 571.585674][ T1025] __x64_sys_unshare+0x2d/0x40 [ 571.590463][ T1025] do_syscall_64+0xf6/0x7d0 [ 571.594994][ T1025] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 571.600900][ T1025] RIP: 0033:0x45ca59 [ 571.604814][ T1025] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 571.624432][ T1025] RSP: 002b:00007fd86babdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 571.632892][ T1025] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 571.640907][ T1025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 571.648909][ T1025] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 571.656898][ T1025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 571.664890][ T1025] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007fd86babe6d4 [ 571.684468][ T28] audit: type=1804 audit(1592564900.853:267): pid=1021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir508541861/syzkaller.OoCMZC/218/cgroup.controllers" dev="sda1" ino=15906 res=1 [ 571.750802][ T1031] FAULT_INJECTION: forcing a failure. [ 571.750802][ T1031] name failslab, interval 1, probability 0, space 0, times 1 [ 571.776179][ T28] audit: type=1804 audit(1592564900.863:268): pid=1021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir508541861/syzkaller.OoCMZC/218/cgroup.controllers" dev="sda1" ino=15906 res=1 [ 571.847257][ T1031] CPU: 1 PID: 1031 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 571.855634][ T1031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.865700][ T1031] Call Trace: [ 571.869017][ T1031] dump_stack+0x188/0x20d [ 571.873380][ T1031] should_fail.cold+0x5/0xa [ 571.877917][ T1031] ? lock_downgrade+0x840/0x840 [ 571.882810][ T1031] ? fault_create_debugfs_attr+0x140/0x140 [ 571.888696][ T1031] should_failslab+0x5/0xf [ 571.893144][ T1031] kmem_cache_alloc+0x29b/0x740 [ 571.898011][ T1031] ? lock_downgrade+0x840/0x840 [ 571.903059][ T1031] ? cap_capable+0x1eb/0x250 [ 571.907790][ T1031] create_new_namespaces+0x30/0xb30 [ 571.915629][ T1031] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 571.921286][ T1031] ksys_unshare+0x43d/0x8e0 [ 571.925832][ T1031] ? walk_process_tree+0x2c0/0x2c0 [ 571.930964][ T1031] ? fput_many+0x2f/0x1a0 [ 571.935317][ T1031] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 571.941315][ T1031] ? do_syscall_64+0x21/0x7d0 [ 571.946018][ T1031] __x64_sys_unshare+0x2d/0x40 [ 571.950803][ T1031] do_syscall_64+0xf6/0x7d0 [ 571.955329][ T1031] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 571.961232][ T1031] RIP: 0033:0x45ca59 [ 571.965149][ T1031] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 571.984765][ T1031] RSP: 002b:00007f7c5a13ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 571.993194][ T1031] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 572.001182][ T1031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 572.009166][ T1031] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 572.017154][ T1031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 572.025143][ T1031] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007f7c5a13b6d4 11:08:21 executing program 1 (fault-call:0 fault-nth:0): unshare(0x40000000) 11:08:21 executing program 3: unshare(0x40000000) 11:08:21 executing program 2: unshare(0x40000000) [ 572.237363][ T1045] FAULT_INJECTION: forcing a failure. [ 572.237363][ T1045] name failslab, interval 1, probability 0, space 0, times 0 [ 572.292242][ T1045] CPU: 0 PID: 1045 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 572.300525][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.302762][ T994] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 572.310596][ T1045] Call Trace: [ 572.310627][ T1045] dump_stack+0x188/0x20d [ 572.310652][ T1045] should_fail.cold+0x5/0xa [ 572.310670][ T1045] ? lock_downgrade+0x840/0x840 [ 572.310686][ T1045] ? fault_create_debugfs_attr+0x140/0x140 [ 572.310711][ T1045] should_failslab+0x5/0xf [ 572.310738][ T1045] kmem_cache_alloc+0x29b/0x740 [ 572.310751][ T1045] ? lock_downgrade+0x840/0x840 [ 572.310770][ T1045] ? cap_capable+0x1eb/0x250 [ 572.310789][ T1045] create_new_namespaces+0x30/0xb30 [ 572.310812][ T1045] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 572.371207][ T1045] ksys_unshare+0x43d/0x8e0 [ 572.375750][ T1045] ? walk_process_tree+0x2c0/0x2c0 [ 572.381002][ T1045] ? fput_many+0x2f/0x1a0 [ 572.385362][ T1045] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 572.391365][ T1045] ? do_syscall_64+0x21/0x7d0 [ 572.396067][ T1045] __x64_sys_unshare+0x2d/0x40 [ 572.400853][ T1045] do_syscall_64+0xf6/0x7d0 [ 572.405381][ T1045] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 572.411290][ T1045] RIP: 0033:0x45ca59 [ 572.415226][ T1045] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 572.434842][ T1045] RSP: 002b:00007fdde8c36c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.443264][ T1045] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 572.451249][ T1045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 572.459239][ T1045] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 572.467229][ T1045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 572.475226][ T1045] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007fdde8c376d4 11:08:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) [ 572.564999][ T1055] IPVS: ftp: loaded support on port[0] = 21 [ 572.580431][ T1054] IPVS: ftp: loaded support on port[0] = 21 11:08:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 572.805375][ T28] audit: type=1804 audit(1592564902.113:269): pid=1065 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/396/cgroup.controllers" dev="sda1" ino=16048 res=1 [ 572.867449][ T1085] IPVS: ftp: loaded support on port[0] = 21 [ 572.889666][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:22 executing program 0 (fault-call:0 fault-nth:0): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:22 executing program 3: unshare(0x40000) [ 573.039935][ T1110] FAULT_INJECTION: forcing a failure. [ 573.039935][ T1110] name failslab, interval 1, probability 0, space 0, times 0 [ 573.056381][ T1110] CPU: 0 PID: 1110 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 573.064660][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.074724][ T1110] Call Trace: [ 573.078037][ T1110] dump_stack+0x188/0x20d [ 573.082394][ T1110] should_fail.cold+0x5/0xa [ 573.086916][ T1110] ? lock_downgrade+0x840/0x840 [ 573.091795][ T1110] ? fault_create_debugfs_attr+0x140/0x140 [ 573.097633][ T1110] should_failslab+0x5/0xf [ 573.102069][ T1110] kmem_cache_alloc+0x29b/0x740 [ 573.106937][ T1110] ? lock_downgrade+0x840/0x840 [ 573.111815][ T1110] ? cap_capable+0x1eb/0x250 [ 573.116468][ T1110] create_new_namespaces+0x30/0xb30 [ 573.121790][ T1110] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 573.127446][ T1110] ksys_unshare+0x43d/0x8e0 [ 573.131970][ T1110] ? walk_process_tree+0x2c0/0x2c0 [ 573.137101][ T1110] ? fput_many+0x2f/0x1a0 [ 573.141449][ T1110] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 573.147452][ T1110] ? do_syscall_64+0x21/0x7d0 [ 573.152191][ T1110] __x64_sys_unshare+0x2d/0x40 [ 573.156977][ T1110] do_syscall_64+0xf6/0x7d0 [ 573.161508][ T1110] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 573.167414][ T1110] RIP: 0033:0x45ca59 11:08:22 executing program 2: unshare(0x40000) [ 573.171337][ T1110] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 573.190947][ T1110] RSP: 002b:00007f5e4f5e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 573.199376][ T1110] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 573.207364][ T1110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 573.215353][ T1110] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 573.223338][ T1110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 573.231352][ T1110] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007f5e4f5ea6d4 11:08:22 executing program 3: unshare(0x80000) 11:08:22 executing program 2: unshare(0x80000) 11:08:22 executing program 1: unshare(0x40000000) 11:08:22 executing program 5: unshare(0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:22 executing program 0 (fault-call:0 fault-nth:1): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a02) 11:08:22 executing program 3: unshare(0x100000) 11:08:22 executing program 2: unshare(0x100000) [ 573.566851][ T1144] IPVS: ftp: loaded support on port[0] = 21 [ 573.651785][ T1160] FAULT_INJECTION: forcing a failure. [ 573.651785][ T1160] name failslab, interval 1, probability 0, space 0, times 0 11:08:23 executing program 3: unshare(0x1000000) [ 573.693633][ T28] audit: type=1804 audit(1592564903.003:270): pid=1150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/397/cgroup.controllers" dev="sda1" ino=16040 res=1 [ 573.704445][ T1150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:23 executing program 2: unshare(0x1000000) [ 573.784566][ T1160] CPU: 0 PID: 1160 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 573.792971][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.803038][ T1160] Call Trace: [ 573.806355][ T1160] dump_stack+0x188/0x20d [ 573.810884][ T1160] should_fail.cold+0x5/0xa [ 573.815508][ T1160] ? lock_downgrade+0x840/0x840 [ 573.820575][ T1160] ? fault_create_debugfs_attr+0x140/0x140 [ 573.826412][ T1160] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 573.832532][ T1160] should_failslab+0x5/0xf [ 573.836973][ T1160] __kmalloc+0x2d9/0x7a0 [ 573.843171][ T1160] ? net_alloc_generic+0x1f/0x70 [ 573.848132][ T1160] ? retire_userns_sysctls+0x80/0x80 [ 573.853443][ T1160] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 573.859272][ T1160] net_alloc_generic+0x1f/0x70 [ 573.864078][ T1160] copy_net_ns+0xcd/0x590 [ 573.868519][ T1160] ? copy_cgroup_ns+0x9d/0x640 [ 573.873308][ T1160] create_new_namespaces+0x3fb/0xb30 [ 573.878620][ T1160] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 573.884278][ T1160] ksys_unshare+0x43d/0x8e0 [ 573.888805][ T1160] ? walk_process_tree+0x2c0/0x2c0 [ 573.893938][ T1160] ? fput_many+0x2f/0x1a0 [ 573.898291][ T1160] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 573.904316][ T1160] ? do_syscall_64+0x21/0x7d0 [ 573.909014][ T1160] __x64_sys_unshare+0x2d/0x40 [ 573.913798][ T1160] do_syscall_64+0xf6/0x7d0 [ 573.918326][ T1160] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 573.924341][ T1160] RIP: 0033:0x45ca59 [ 573.928256][ T1160] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 573.947902][ T1160] RSP: 002b:00007f5e4f5e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 573.956355][ T1160] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 573.964345][ T1160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 573.972334][ T1160] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 573.980320][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 573.988306][ T1160] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007f5e4f5ea6d4 11:08:23 executing program 5: unshare(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:23 executing program 0 (fault-call:0 fault-nth:2): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:23 executing program 2: unshare(0x2000000) 11:08:23 executing program 3: unshare(0x2000000) [ 574.264336][ T1207] FAULT_INJECTION: forcing a failure. [ 574.264336][ T1207] name failslab, interval 1, probability 0, space 0, times 0 [ 574.347262][ T1207] CPU: 0 PID: 1207 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 574.355543][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.365621][ T1207] Call Trace: [ 574.368959][ T1207] dump_stack+0x188/0x20d [ 574.373316][ T1207] should_fail.cold+0x5/0xa [ 574.377840][ T1207] ? lock_downgrade+0x840/0x840 [ 574.382722][ T1207] ? fault_create_debugfs_attr+0x140/0x140 [ 574.388562][ T1207] should_failslab+0x5/0xf [ 574.393002][ T1207] kmem_cache_alloc+0x29b/0x740 [ 574.397882][ T1207] copy_net_ns+0xef/0x590 [ 574.402251][ T1207] ? copy_cgroup_ns+0x9d/0x640 [ 574.407084][ T1207] create_new_namespaces+0x3fb/0xb30 [ 574.412411][ T1207] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 574.418074][ T1207] ksys_unshare+0x43d/0x8e0 [ 574.422601][ T1207] ? walk_process_tree+0x2c0/0x2c0 [ 574.433386][ T1207] ? fput_many+0x2f/0x1a0 [ 574.437741][ T1207] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 574.443742][ T1207] ? do_syscall_64+0x21/0x7d0 [ 574.448486][ T1207] __x64_sys_unshare+0x2d/0x40 [ 574.454751][ T1207] do_syscall_64+0xf6/0x7d0 [ 574.459279][ T1207] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 574.465185][ T1207] RIP: 0033:0x45ca59 [ 574.469096][ T1207] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.488708][ T1207] RSP: 002b:00007f5e4f5e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 11:08:23 executing program 2: unshare(0x3000000) 11:08:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a03) 11:08:23 executing program 1: unshare(0x40000) 11:08:23 executing program 3: unshare(0x3000000) [ 574.497137][ T1207] RAX: ffffffffffffffda RBX: 000000000050af60 RCX: 000000000045ca59 [ 574.505124][ T1207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 574.513110][ T1207] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 574.521094][ T1207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 574.529081][ T1207] R13: 0000000000000c73 R14: 00000000004cecac R15: 00007f5e4f5ea6d4 11:08:23 executing program 5: unshare(0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:24 executing program 2: unshare(0x4000000) 11:08:24 executing program 1: unshare(0x80000) 11:08:24 executing program 3: unshare(0x4000000) 11:08:24 executing program 2: unshare(0x5000000) [ 574.745640][ T28] audit: type=1804 audit(1592564904.053:271): pid=1231 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/398/cgroup.controllers" dev="sda1" ino=16056 res=1 [ 574.783839][ T1231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:24 executing program 1: unshare(0x100000) 11:08:24 executing program 3: unshare(0x5000000) 11:08:24 executing program 5: unshare(0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:24 executing program 2: unshare(0x6000000) 11:08:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a04) 11:08:24 executing program 1: unshare(0x1000000) 11:08:24 executing program 3: unshare(0x6000000) 11:08:24 executing program 2: unshare(0x7000000) [ 575.317246][ T1262] IPVS: ftp: loaded support on port[0] = 21 [ 575.359363][ T28] audit: type=1804 audit(1592564904.673:272): pid=1263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/399/cgroup.controllers" dev="sda1" ino=16064 res=1 [ 575.391916][ T1263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:24 executing program 5: unshare(0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:24 executing program 1: unshare(0x2000000) 11:08:24 executing program 3: unshare(0x7000000) 11:08:24 executing program 0: unshare(0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:24 executing program 2: unshare(0x8000000) 11:08:24 executing program 3: unshare(0x8000000) 11:08:25 executing program 5: unshare(0x3000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:25 executing program 1: unshare(0x3000000) 11:08:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a05) 11:08:25 executing program 3: unshare(0x9000000) 11:08:25 executing program 2: unshare(0x9000000) 11:08:25 executing program 1: unshare(0x4000000) 11:08:25 executing program 3: unshare(0xa000000) 11:08:25 executing program 5: unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:25 executing program 0: unshare(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:25 executing program 2: unshare(0xa000000) 11:08:25 executing program 1: unshare(0x5000000) [ 576.132587][ T28] audit: type=1804 audit(1592564905.444:273): pid=1344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/400/cgroup.controllers" dev="sda1" ino=16068 res=1 [ 576.164421][ T1344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:25 executing program 3: unshare(0xb000000) 11:08:25 executing program 0: unshare(0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:25 executing program 1: unshare(0x6000000) 11:08:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a06) 11:08:25 executing program 5: unshare(0x5000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:25 executing program 2: unshare(0xb000000) 11:08:25 executing program 3: unshare(0xc000000) 11:08:25 executing program 1: unshare(0x7000000) 11:08:26 executing program 1: unshare(0x8000000) 11:08:26 executing program 2: unshare(0xc000000) 11:08:26 executing program 5: unshare(0x6000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:26 executing program 0: unshare(0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:26 executing program 3: unshare(0xd000000) [ 576.837214][ T28] audit: type=1804 audit(1592564906.144:274): pid=1398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/401/cgroup.controllers" dev="sda1" ino=16090 res=1 [ 576.855619][ T1398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:26 executing program 3: unshare(0xe000000) 11:08:26 executing program 2: unshare(0xd000000) 11:08:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a07) 11:08:26 executing program 1: unshare(0x9000000) 11:08:26 executing program 5: unshare(0x7000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:26 executing program 0: unshare(0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:26 executing program 2: unshare(0xe000000) 11:08:26 executing program 3: unshare(0xf000000) 11:08:26 executing program 1: unshare(0xa000000) 11:08:26 executing program 2: unshare(0xf000000) 11:08:26 executing program 5: unshare(0x8000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 577.505743][ T28] audit: type=1804 audit(1592564906.814:275): pid=1454 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/402/cgroup.controllers" dev="sda1" ino=16054 res=1 11:08:26 executing program 3: unshare(0x10000000) [ 577.567764][ T1454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:26 executing program 2: unshare(0x10000000) 11:08:26 executing program 0: unshare(0x3000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a08) 11:08:27 executing program 5: unshare(0x9000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:27 executing program 1: unshare(0xb000000) 11:08:27 executing program 3: unshare(0x11000000) 11:08:27 executing program 2: unshare(0x11000000) 11:08:27 executing program 0: unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:27 executing program 1: unshare(0xc000000) 11:08:27 executing program 3: unshare(0x12000000) 11:08:27 executing program 2: unshare(0x12000000) [ 578.094394][ T28] audit: type=1804 audit(1592564907.404:276): pid=1495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/403/cgroup.controllers" dev="sda1" ino=16097 res=1 [ 578.122787][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:27 executing program 5: unshare(0xa000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:27 executing program 2: unshare(0x13000000) 11:08:27 executing program 3: unshare(0x13000000) 11:08:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a09) 11:08:27 executing program 5: unshare(0xb000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:27 executing program 0: unshare(0x5000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:27 executing program 1: unshare(0xd000000) 11:08:27 executing program 3: unshare(0x14000000) 11:08:27 executing program 2: unshare(0x14000000) 11:08:28 executing program 1: unshare(0xe000000) 11:08:28 executing program 2: unshare(0x15000000) 11:08:28 executing program 3: unshare(0x15000000) [ 578.792650][ T28] audit: type=1804 audit(1592564908.104:277): pid=1557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/404/cgroup.controllers" dev="sda1" ino=16049 res=1 [ 578.800421][ T1557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:28 executing program 0: unshare(0x6000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:28 executing program 2: unshare(0x16000000) 11:08:28 executing program 5: unshare(0xc000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a0a) 11:08:28 executing program 3: unshare(0x16000000) 11:08:28 executing program 1: unshare(0xf000000) 11:08:28 executing program 2: unshare(0x17000000) 11:08:28 executing program 0: unshare(0x7000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:28 executing program 5: unshare(0xd000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:28 executing program 2: unshare(0x18000000) 11:08:28 executing program 3: unshare(0x17000000) 11:08:28 executing program 1: unshare(0x10000000) 11:08:28 executing program 1: unshare(0x11000000) 11:08:28 executing program 3: unshare(0x18000000) [ 579.457984][ T28] audit: type=1804 audit(1592564908.764:278): pid=1607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/405/cgroup.controllers" dev="sda1" ino=16049 res=1 [ 579.486232][ T1607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:28 executing program 2: unshare(0x19000000) 11:08:29 executing program 0: unshare(0x8000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a0b) 11:08:29 executing program 5: unshare(0xe000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:29 executing program 1: unshare(0x12000000) 11:08:29 executing program 3: unshare(0x19000000) 11:08:29 executing program 2: unshare(0x1a000000) 11:08:29 executing program 2: unshare(0x1b000000) 11:08:29 executing program 1: unshare(0x13000000) 11:08:29 executing program 3: unshare(0x1a000000) [ 580.059574][ T28] audit: type=1804 audit(1592564909.364:279): pid=1648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/406/cgroup.controllers" dev="sda1" ino=16109 res=1 [ 580.130238][ T1648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:29 executing program 0: unshare(0x9000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:29 executing program 1: unshare(0x14000000) 11:08:29 executing program 5: unshare(0xf000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:29 executing program 2: unshare(0x1c000000) 11:08:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a0c) 11:08:30 executing program 3: unshare(0x1b000000) 11:08:30 executing program 1: unshare(0x15000000) 11:08:30 executing program 2: unshare(0x1d000000) 11:08:30 executing program 0: unshare(0xa000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:30 executing program 5: unshare(0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:30 executing program 1: unshare(0x16000000) 11:08:30 executing program 2: unshare(0x1e000000) 11:08:30 executing program 3: unshare(0x1c000000) 11:08:30 executing program 0: unshare(0xb000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:30 executing program 5: unshare(0x11000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 581.041769][ T28] audit: type=1804 audit(1592564910.354:280): pid=1725 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/407/cgroup.controllers" dev="sda1" ino=16107 res=1 11:08:30 executing program 2: unshare(0x1f000000) 11:08:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a0d) 11:08:31 executing program 3: unshare(0x1d000000) 11:08:31 executing program 1: unshare(0x17000000) 11:08:31 executing program 2: unshare(0x20000000) 11:08:31 executing program 5: unshare(0x12000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:31 executing program 0: unshare(0xc000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:31 executing program 1: unshare(0x18000000) 11:08:31 executing program 2: unshare(0x21000000) 11:08:31 executing program 3: unshare(0x1e000000) 11:08:31 executing program 1: unshare(0x19000000) [ 581.975262][ T28] audit: type=1804 audit(1592564911.284:281): pid=1781 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/408/cgroup.controllers" dev="sda1" ino=16123 res=1 [ 582.004274][ T1781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:31 executing program 5: unshare(0x13000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:31 executing program 2: unshare(0x22000000) 11:08:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a0e) 11:08:31 executing program 3: unshare(0x1f000000) 11:08:31 executing program 0: unshare(0xd000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:31 executing program 1: unshare(0x1a000000) 11:08:31 executing program 2: unshare(0x23000000) 11:08:31 executing program 5: unshare(0x14000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:31 executing program 2: unshare(0x24000000) 11:08:31 executing program 3: unshare(0x20000000) 11:08:31 executing program 1: unshare(0x1b000000) 11:08:31 executing program 5: unshare(0x15000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a0f) 11:08:32 executing program 0: unshare(0xe000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:32 executing program 2: unshare(0x25000000) 11:08:32 executing program 1: unshare(0x1c000000) 11:08:32 executing program 3: unshare(0x21000000) 11:08:32 executing program 2: unshare(0x26000000) [ 582.940057][ T28] audit: type=1804 audit(1592564912.254:282): pid=1848 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/410/cgroup.controllers" dev="sda1" ino=16129 res=1 [ 582.976364][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:32 executing program 1: unshare(0x1d000000) 11:08:32 executing program 3: unshare(0x22000000) 11:08:32 executing program 5: unshare(0x16000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:32 executing program 2: unshare(0x27000000) 11:08:32 executing program 1: unshare(0x1e000000) 11:08:32 executing program 3: unshare(0x23000000) 11:08:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a10) 11:08:32 executing program 2: unshare(0x28000000) 11:08:32 executing program 0: unshare(0xf000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:32 executing program 5: unshare(0x17000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:32 executing program 1: unshare(0x1f000000) 11:08:32 executing program 3: unshare(0x24000000) 11:08:32 executing program 2: unshare(0x29000000) 11:08:32 executing program 1: unshare(0x20000000) 11:08:33 executing program 5: unshare(0x18000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:33 executing program 3: unshare(0x25000000) [ 583.691875][ T28] audit: type=1804 audit(1592564913.004:283): pid=1903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/411/cgroup.controllers" dev="sda1" ino=16149 res=1 [ 583.727590][ T1903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:33 executing program 0: unshare(0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:33 executing program 2: unshare(0x2a000000) 11:08:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a12) 11:08:33 executing program 3: unshare(0x26000000) 11:08:33 executing program 1: unshare(0x21000000) 11:08:33 executing program 5: unshare(0x19000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:33 executing program 2: unshare(0x2b000000) 11:08:33 executing program 0: unshare(0x11000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:33 executing program 3: unshare(0x27000000) 11:08:33 executing program 1: unshare(0x22000000) [ 584.314051][ T28] audit: type=1804 audit(1592564913.624:284): pid=1952 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/412/cgroup.controllers" dev="sda1" ino=16150 res=1 11:08:33 executing program 2: unshare(0x2c000000) [ 584.360417][ T1952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:33 executing program 3: unshare(0x28000000) 11:08:33 executing program 5: unshare(0x1a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:33 executing program 1: unshare(0x23000000) 11:08:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a13) 11:08:34 executing program 0: unshare(0x12000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:34 executing program 1: unshare(0x24000000) 11:08:34 executing program 2: unshare(0x2d000000) 11:08:34 executing program 3: unshare(0x29000000) 11:08:34 executing program 5: unshare(0x1b000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:34 executing program 2: unshare(0x2e000000) 11:08:34 executing program 3: unshare(0x2a000000) 11:08:34 executing program 1: unshare(0x25000000) [ 585.067055][ T28] audit: type=1804 audit(1592564914.374:285): pid=2004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/413/cgroup.controllers" dev="sda1" ino=16170 res=1 [ 585.094569][ T2004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:34 executing program 0: unshare(0x13000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:34 executing program 5: unshare(0x1c000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:34 executing program 1: unshare(0x26000000) 11:08:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a23) 11:08:34 executing program 3: unshare(0x2b000000) 11:08:34 executing program 2: unshare(0x2f000000) 11:08:34 executing program 0: unshare(0x14000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:34 executing program 1: unshare(0x27000000) 11:08:34 executing program 5: unshare(0x1d000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:35 executing program 1: unshare(0x28000000) 11:08:35 executing program 2: unshare(0x30000000) 11:08:35 executing program 3: unshare(0x2c000000) 11:08:35 executing program 5: unshare(0x1e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:35 executing program 0: unshare(0x15000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a30) 11:08:35 executing program 2: unshare(0x31000000) 11:08:35 executing program 1: unshare(0x29000000) 11:08:35 executing program 3: unshare(0x2d000000) 11:08:35 executing program 5: unshare(0x1f000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 586.111027][ T28] audit: type=1804 audit(1592564915.424:286): pid=2090 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/415/cgroup.controllers" dev="sda1" ino=16154 res=1 [ 586.119782][ T2084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:35 executing program 2: unshare(0x32000000) 11:08:35 executing program 3: unshare(0x2e000000) 11:08:35 executing program 1: unshare(0x2a000000) 11:08:35 executing program 5: unshare(0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:35 executing program 0: unshare(0x16000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:35 executing program 2: unshare(0x33000000) 11:08:35 executing program 1: unshare(0x2b000000) 11:08:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a31) 11:08:35 executing program 3: unshare(0x2f000000) 11:08:36 executing program 1: unshare(0x2c000000) 11:08:36 executing program 2: unshare(0x34000000) 11:08:36 executing program 0: unshare(0x17000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:36 executing program 5: unshare(0x21000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:36 executing program 3: unshare(0x30000000) 11:08:36 executing program 1: unshare(0x2d000000) [ 586.859950][ T28] audit: type=1804 audit(1592564916.175:287): pid=2140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/416/cgroup.controllers" dev="sda1" ino=16149 res=1 [ 586.895413][ T2140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:36 executing program 2: unshare(0x35000000) 11:08:36 executing program 3: unshare(0x31000000) 11:08:36 executing program 2: unshare(0x36000000) 11:08:36 executing program 3: unshare(0x32000000) 11:08:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a32) 11:08:36 executing program 1: unshare(0x2e000000) 11:08:36 executing program 0: unshare(0x18000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:36 executing program 5: unshare(0x22000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:36 executing program 3: unshare(0x33000000) 11:08:36 executing program 2: unshare(0x37000000) 11:08:36 executing program 3: unshare(0x34000000) 11:08:36 executing program 1: unshare(0x2f000000) 11:08:36 executing program 2: unshare(0x38000000) [ 587.531305][ T28] audit: type=1804 audit(1592564916.845:288): pid=2188 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/417/cgroup.controllers" dev="sda1" ino=16176 res=1 [ 587.571094][ T2188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:36 executing program 5: unshare(0x23000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:37 executing program 0: unshare(0x19000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:37 executing program 3: unshare(0x35000000) 11:08:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a33) 11:08:37 executing program 1: unshare(0x30000000) 11:08:37 executing program 2: unshare(0x39000000) 11:08:37 executing program 3: unshare(0x36000000) 11:08:37 executing program 0: unshare(0x1a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:37 executing program 5: unshare(0x24000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:37 executing program 1: unshare(0x31000000) 11:08:37 executing program 2: unshare(0x3a000000) 11:08:37 executing program 3: unshare(0x37000000) [ 588.220233][ T28] audit: type=1804 audit(1592564917.535:289): pid=2236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/418/cgroup.controllers" dev="sda1" ino=16142 res=1 [ 588.250697][ T2236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:37 executing program 5: unshare(0x25000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:37 executing program 1: unshare(0x32000000) 11:08:37 executing program 2: unshare(0x3b000000) 11:08:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a34) 11:08:37 executing program 3: unshare(0x38000000) 11:08:37 executing program 0: unshare(0x1b000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:37 executing program 1: unshare(0x33000000) 11:08:37 executing program 2: unshare(0x3c000000) 11:08:38 executing program 5: unshare(0x26000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:38 executing program 2: unshare(0x3d000000) 11:08:38 executing program 1: unshare(0x34000000) 11:08:38 executing program 3: unshare(0x39000000) [ 588.864728][ T28] audit: type=1804 audit(1592564918.175:290): pid=2286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/419/cgroup.controllers" dev="sda1" ino=16150 res=1 [ 588.894727][ T2286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:38 executing program 1: unshare(0x35000000) 11:08:38 executing program 3: unshare(0x3a000000) 11:08:38 executing program 0: unshare(0x1c000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a35) 11:08:38 executing program 3: unshare(0x3b000000) 11:08:38 executing program 2: unshare(0x3e000000) 11:08:38 executing program 5: unshare(0x27000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:38 executing program 1: unshare(0x36000000) 11:08:38 executing program 0: unshare(0x1d000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:38 executing program 3: unshare(0x3c000000) 11:08:38 executing program 2: unshare(0x3f000000) 11:08:38 executing program 1: unshare(0x37000000) 11:08:38 executing program 5: unshare(0x28000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 589.526114][ T28] audit: type=1804 audit(1592564918.835:291): pid=2341 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/420/cgroup.controllers" dev="sda1" ino=16142 res=1 [ 589.560915][ T2341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:38 executing program 3: unshare(0x3d000000) 11:08:38 executing program 0: unshare(0x1e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a36) 11:08:39 executing program 1: unshare(0x38000000) 11:08:39 executing program 2: unshare(0x40000002) 11:08:39 executing program 3: unshare(0x3e000000) 11:08:39 executing program 5: unshare(0x29000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:39 executing program 0: unshare(0x1f000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:39 executing program 3: unshare(0x3f000000) 11:08:39 executing program 1: unshare(0x39000000) 11:08:39 executing program 2: unshare(0x40000003) 11:08:39 executing program 0: unshare(0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:39 executing program 3: unshare(0x40000002) [ 590.268964][ T28] audit: type=1804 audit(1592564919.585:292): pid=2392 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/421/cgroup.controllers" dev="sda1" ino=16153 res=1 [ 590.304638][ T2392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:39 executing program 5: unshare(0x2a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:39 executing program 2: unshare(0x40000004) 11:08:39 executing program 1: unshare(0x3a000000) 11:08:39 executing program 3: unshare(0x40000003) 11:08:39 executing program 0: unshare(0x21000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a37) 11:08:40 executing program 5: unshare(0x2b000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:40 executing program 1: unshare(0x3b000000) 11:08:40 executing program 3: unshare(0x40000004) 11:08:40 executing program 2: unshare(0x40000005) [ 590.908846][ T28] audit: type=1804 audit(1592564920.225:293): pid=2436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/422/cgroup.controllers" dev="sda1" ino=16142 res=1 11:08:40 executing program 3: unshare(0x40000005) 11:08:40 executing program 0: unshare(0x22000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 590.960255][ T2436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:40 executing program 1: unshare(0x3c000000) 11:08:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a38) 11:08:40 executing program 2: unshare(0x40000006) 11:08:40 executing program 5: unshare(0x2c000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:40 executing program 3: unshare(0x40000006) 11:08:40 executing program 1: unshare(0x3d000000) 11:08:40 executing program 0: unshare(0x23000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:40 executing program 1: unshare(0x3e000000) 11:08:40 executing program 3: unshare(0x40000007) 11:08:40 executing program 2: unshare(0x40000007) [ 591.593322][ T28] audit: type=1804 audit(1592564920.905:294): pid=2500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/423/cgroup.controllers" dev="sda1" ino=15733 res=1 [ 591.601485][ T2500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:41 executing program 5: unshare(0x2d000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:41 executing program 1: unshare(0x3f000000) 11:08:41 executing program 0: unshare(0x24000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a39) 11:08:41 executing program 2: unshare(0x4000000a) 11:08:41 executing program 3: unshare(0x40000008) 11:08:41 executing program 1: unshare(0x40000002) 11:08:41 executing program 5: unshare(0x2e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:41 executing program 0: unshare(0x25000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:41 executing program 3: unshare(0x4000000a) 11:08:41 executing program 1: unshare(0x40000003) 11:08:41 executing program 2: unshare(0x4000000c) [ 592.273559][ T28] audit: type=1804 audit(1592564921.585:295): pid=2557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/424/cgroup.controllers" dev="sda1" ino=16289 res=1 [ 592.280324][ T2557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:41 executing program 0: unshare(0x26000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:41 executing program 1: unshare(0x40000004) 11:08:41 executing program 3: unshare(0x4000000c) 11:08:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a3a) 11:08:42 executing program 2: unshare(0x4000000e) 11:08:42 executing program 1: unshare(0x40000005) 11:08:42 executing program 5: unshare(0x2f000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:42 executing program 3: unshare(0x40000010) 11:08:42 executing program 0: unshare(0x27000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:42 executing program 1: unshare(0x40000006) 11:08:42 executing program 3: unshare(0x40000011) 11:08:42 executing program 2: unshare(0x40000010) 11:08:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a3b) 11:08:42 executing program 5: unshare(0x30000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:42 executing program 0: unshare(0x28000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:42 executing program 1: unshare(0x40000007) 11:08:42 executing program 3: unshare(0x40000012) [ 593.163013][ T28] audit: type=1804 audit(1592564922.475:296): pid=2623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/426/cgroup.controllers" dev="sda1" ino=16150 res=1 [ 593.170897][ T2623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:42 executing program 2: unshare(0x40000011) 11:08:42 executing program 3: unshare(0x40000014) 11:08:42 executing program 1: unshare(0x40000008) 11:08:42 executing program 5: unshare(0x31000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:42 executing program 3: unshare(0x40000016) 11:08:42 executing program 2: unshare(0x40000012) 11:08:42 executing program 0: unshare(0x29000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 593.868990][ T28] audit: type=1804 audit(1592564923.185:297): pid=2632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/426/cgroup.controllers" dev="sda1" ino=16150 res=1 11:08:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a3c) 11:08:43 executing program 1: unshare(0x4000000a) 11:08:43 executing program 3: unshare(0x40000018) 11:08:43 executing program 2: unshare(0x40000014) 11:08:43 executing program 5: unshare(0x32000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:43 executing program 0: unshare(0x2a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:43 executing program 2: unshare(0x40000016) 11:08:43 executing program 3: unshare(0x4000001c) 11:08:43 executing program 1: unshare(0x4000000c) 11:08:43 executing program 5: unshare(0x33000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a3d) 11:08:43 executing program 2: unshare(0x40000018) 11:08:43 executing program 0: unshare(0x2b000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:43 executing program 3: unshare(0x40000024) 11:08:43 executing program 1: unshare(0x40000011) 11:08:43 executing program 2: unshare(0x4000001c) 11:08:43 executing program 3: unshare(0x4000002a) 11:08:44 executing program 1: unshare(0x40000012) 11:08:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a3e) 11:08:44 executing program 5: unshare(0x34000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:44 executing program 3: unshare(0x40000034) 11:08:44 executing program 0: unshare(0x2c000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:44 executing program 2: unshare(0x40000024) 11:08:44 executing program 1: unshare(0x40000014) 11:08:44 executing program 3: unshare(0x40000036) 11:08:44 executing program 2: unshare(0x4000002a) [ 594.983748][ T28] audit: type=1804 audit(1592564924.295:298): pid=2756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/429/cgroup.controllers" dev="sda1" ino=16150 res=1 [ 595.000159][ T2756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:44 executing program 1: unshare(0x4000001a) 11:08:44 executing program 5: unshare(0x35000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:44 executing program 3: unshare(0x40000038) 11:08:44 executing program 0: unshare(0x2d000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a48) 11:08:44 executing program 2: unshare(0x4000002e) 11:08:44 executing program 3: unshare(0x4000003a) 11:08:44 executing program 1: unshare(0x40000022) 11:08:44 executing program 5: unshare(0x36000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:44 executing program 0: unshare(0x2e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:44 executing program 2: unshare(0x40000034) 11:08:44 executing program 1: unshare(0x4000002a) 11:08:45 executing program 3: unshare(0x40000046) 11:08:45 executing program 5: unshare(0x37000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:45 executing program 1: unshare(0x40000030) [ 595.815980][ T28] audit: type=1804 audit(1592564925.125:299): pid=2824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/430/cgroup.controllers" dev="sda1" ino=16384 res=1 11:08:45 executing program 2: unshare(0x40000036) [ 595.856347][ T2824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a4c) 11:08:45 executing program 1: unshare(0x40000032) 11:08:45 executing program 3: unshare(0x40000048) 11:08:45 executing program 0: unshare(0x2f000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:45 executing program 5: unshare(0x38000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:45 executing program 2: unshare(0x40000038) 11:08:45 executing program 1: unshare(0x40000038) 11:08:45 executing program 2: unshare(0x4000003a) 11:08:45 executing program 3: unshare(0x4000004a) 11:08:45 executing program 5: unshare(0x39000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 596.476297][ T28] audit: type=1804 audit(1592564925.785:300): pid=2868 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/431/cgroup.controllers" dev="sda1" ino=16149 res=1 [ 596.514479][ T2868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:45 executing program 1: unshare(0x4000003a) 11:08:45 executing program 2: unshare(0x40000046) 11:08:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a60) 11:08:46 executing program 0: unshare(0x30000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:46 executing program 3: unshare(0x4000004c) 11:08:46 executing program 1: unshare(0x4000003b) 11:08:46 executing program 2: unshare(0x40000048) 11:08:46 executing program 5: unshare(0x3a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:46 executing program 1: unshare(0x40000042) 11:08:46 executing program 2: unshare(0x4000004a) 11:08:46 executing program 3: unshare(0x40000052) 11:08:46 executing program 1: unshare(0x40000046) 11:08:46 executing program 5: unshare(0x3b000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 597.204212][ T28] audit: type=1804 audit(1592564926.515:301): pid=2913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/432/cgroup.controllers" dev="sda1" ino=15905 res=1 [ 597.240221][ T2913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:46 executing program 0: unshare(0x31000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a68) 11:08:46 executing program 2: unshare(0x4000004c) 11:08:46 executing program 3: unshare(0x4000005a) 11:08:46 executing program 1: unshare(0x40000048) 11:08:46 executing program 5: unshare(0x3c000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:46 executing program 0: unshare(0x32000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:47 executing program 2: unshare(0x40000052) 11:08:47 executing program 3: unshare(0x4000005c) 11:08:47 executing program 1: unshare(0x4000004a) [ 597.736315][ T28] audit: type=1804 audit(1592564927.046:302): pid=2958 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/433/cgroup.controllers" dev="sda1" ino=15986 res=1 [ 597.780076][ T2958] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:47 executing program 3: unshare(0x40000060) 11:08:47 executing program 2: unshare(0x4000005a) 11:08:47 executing program 0: unshare(0x33000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a6c) 11:08:47 executing program 1: unshare(0x4000004c) 11:08:47 executing program 5: unshare(0x3d000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:47 executing program 2: unshare(0x4000005c) 11:08:47 executing program 3: unshare(0x40000068) 11:08:47 executing program 0: unshare(0x34000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:47 executing program 1: unshare(0x40000052) 11:08:47 executing program 2: unshare(0x40000060) 11:08:47 executing program 3: unshare(0x4000006c) 11:08:47 executing program 0: unshare(0x35000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:47 executing program 5: unshare(0x3e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 598.469326][ T28] audit: type=1804 audit(1592564927.786:303): pid=3012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/434/cgroup.controllers" dev="sda1" ino=15759 res=1 [ 598.475015][ T3012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:47 executing program 1: unshare(0x40000056) 11:08:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a74) 11:08:48 executing program 2: unshare(0x40000064) 11:08:48 executing program 3: unshare(0x40000072) 11:08:48 executing program 5: unshare(0x3f000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:48 executing program 1: unshare(0x4000005a) 11:08:48 executing program 0: unshare(0x36000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:48 executing program 2: unshare(0x40000066) 11:08:48 executing program 3: unshare(0x40000074) 11:08:48 executing program 1: unshare(0x4000005c) 11:08:48 executing program 5: unshare(0x40000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:48 executing program 0: unshare(0x37000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 599.115961][ T28] audit: type=1804 audit(1592564928.426:304): pid=3064 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/435/cgroup.controllers" dev="sda1" ino=15759 res=1 [ 599.124459][ T3064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:48 executing program 2: unshare(0x40000068) 11:08:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a79) 11:08:48 executing program 1: unshare(0x40000068) 11:08:48 executing program 3: unshare(0x40000078) 11:08:48 executing program 0: unshare(0x38000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:48 executing program 2: unshare(0x4000006c) 11:08:48 executing program 5: unshare(0x40000003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:49 executing program 1: unshare(0x4000006c) 11:08:49 executing program 3: unshare(0x4000007a) 11:08:49 executing program 2: unshare(0x40000072) 11:08:49 executing program 1: unshare(0x40000072) [ 599.861860][ T28] audit: type=1804 audit(1592564929.166:305): pid=3116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/436/cgroup.controllers" dev="sda1" ino=15761 res=1 [ 599.863682][ T3116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:49 executing program 0: unshare(0x39000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:49 executing program 5: unshare(0x40000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a7a) 11:08:49 executing program 3: unshare(0x4000007c) 11:08:49 executing program 1: unshare(0x40000074) 11:08:49 executing program 2: unshare(0x40000074) 11:08:49 executing program 0: unshare(0x3a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:49 executing program 5: unshare(0x40000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:49 executing program 3: unshare(0x40000082) 11:08:50 executing program 2: unshare(0x40000076) 11:08:50 executing program 1: unshare(0x4000007a) 11:08:50 executing program 5: unshare(0x40000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:50 executing program 0: unshare(0x3b000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:50 executing program 3: unshare(0x4000008a) [ 600.834841][ T28] audit: type=1804 audit(1592564930.136:306): pid=3193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/437/cgroup.controllers" dev="sda1" ino=15954 res=1 [ 600.871910][ T3193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a99) 11:08:50 executing program 1: unshare(0x4000007c) 11:08:50 executing program 2: unshare(0x4000007a) 11:08:50 executing program 3: unshare(0x40000098) 11:08:50 executing program 5: unshare(0x40000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:50 executing program 0: unshare(0x3c000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:50 executing program 3: unshare(0x4000009c) 11:08:50 executing program 1: unshare(0x4000007e) 11:08:50 executing program 2: unshare(0x4000007c) [ 601.468256][ T28] audit: type=1804 audit(1592564930.776:307): pid=3250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/438/cgroup.controllers" dev="sda1" ino=15811 res=1 [ 601.506496][ T3250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:50 executing program 3: unshare(0x400000aa) 11:08:50 executing program 5: unshare(0x4000000a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:50 executing program 0: unshare(0x3d000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a9e) 11:08:51 executing program 1: unshare(0x40000082) 11:08:51 executing program 2: unshare(0x40000082) 11:08:51 executing program 3: unshare(0x400000ba) 11:08:51 executing program 5: unshare(0x4000000c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:51 executing program 0: unshare(0x3e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:51 executing program 3: unshare(0x400000bc) 11:08:51 executing program 2: unshare(0x40000088) 11:08:51 executing program 1: unshare(0x40000088) 11:08:51 executing program 0: unshare(0x3f000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 602.201406][ T28] audit: type=1804 audit(1592564931.506:308): pid=3315 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/439/cgroup.controllers" dev="sda1" ino=16383 res=1 11:08:51 executing program 3: unshare(0x400000c0) [ 602.246467][ T3315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:51 executing program 5: unshare(0x40000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a9f) 11:08:51 executing program 2: unshare(0x4000008a) 11:08:51 executing program 1: unshare(0x4000008a) 11:08:51 executing program 3: unshare(0x400000d2) 11:08:51 executing program 0: unshare(0x40000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:51 executing program 5: unshare(0x40000011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:52 executing program 2: unshare(0x4000009c) 11:08:52 executing program 1: unshare(0x4000008c) 11:08:52 executing program 3: unshare(0x400000d8) 11:08:52 executing program 0: unshare(0x40000003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:52 executing program 1: unshare(0x4000008e) [ 602.939431][ T28] audit: type=1804 audit(1592564932.246:309): pid=3386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/440/cgroup.controllers" dev="sda1" ino=15811 res=1 [ 602.973285][ T3386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:52 executing program 5: unshare(0x40000012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:52 executing program 3: unshare(0x400000e2) 11:08:52 executing program 2: unshare(0x400000ba) 11:08:52 executing program 1: unshare(0x40000094) 11:08:52 executing program 0: unshare(0x40000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002ae0) 11:08:52 executing program 5: unshare(0x40000014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:52 executing program 2: unshare(0x400000c0) 11:08:52 executing program 1: unshare(0x4000009c) 11:08:52 executing program 3: unshare(0x400000f0) 11:08:52 executing program 5: unshare(0x40000016) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:53 executing program 0: unshare(0x40000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:53 executing program 1: unshare(0x400000a6) 11:08:53 executing program 2: unshare(0x400000c8) [ 603.682048][ T28] audit: type=1804 audit(1592564932.986:310): pid=3447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/441/cgroup.controllers" dev="sda1" ino=15905 res=1 [ 603.716914][ T3447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:53 executing program 3: unshare(0x400000f2) 11:08:53 executing program 1: unshare(0x400000b0) 11:08:53 executing program 2: unshare(0x400000d2) 11:08:53 executing program 0: unshare(0x40000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:53 executing program 3: unshare(0x400000f4) 11:08:53 executing program 5: unshare(0x4000001a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002af0) 11:08:53 executing program 2: unshare(0x400000e2) 11:08:53 executing program 1: unshare(0x400000b4) 11:08:53 executing program 3: unshare(0x400000fa) 11:08:53 executing program 2: unshare(0x400000f0) [ 604.347368][ T28] audit: type=1804 audit(1592564933.656:311): pid=3496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/442/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 604.357904][ T3496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:53 executing program 1: unshare(0x400000b8) 11:08:53 executing program 5: unshare(0x40000022) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:53 executing program 0: unshare(0x40000007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:53 executing program 3: unshare(0x400000fc) 11:08:53 executing program 1: unshare(0x400000ba) 11:08:53 executing program 2: unshare(0x400000f2) 11:08:54 executing program 3: unshare(0x40000104) 11:08:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100006800) 11:08:54 executing program 2: unshare(0x400000f4) 11:08:54 executing program 1: unshare(0x400000bc) 11:08:54 executing program 5: unshare(0x4000002a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:54 executing program 0: unshare(0x40000008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:54 executing program 3: unshare(0x40000106) 11:08:54 executing program 1: unshare(0x400000c2) 11:08:54 executing program 2: unshare(0x400000fa) 11:08:54 executing program 3: unshare(0x40000112) [ 605.224992][ T28] audit: type=1804 audit(1592564934.526:312): pid=3565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/443/cgroup.controllers" dev="sda1" ino=15858 res=1 [ 605.246093][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:54 executing program 0: unshare(0x40000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:54 executing program 5: unshare(0x40000034) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:54 executing program 1: unshare(0x400000c6) [ 605.932017][ T28] audit: type=1804 audit(1592564935.236:313): pid=3569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/443/cgroup.controllers" dev="sda1" ino=15858 res=1 11:08:55 executing program 3: unshare(0x40000114) 11:08:55 executing program 2: unshare(0x400000fc) 11:08:55 executing program 1: unshare(0x400000c8) 11:08:55 executing program 5: unshare(0x40000038) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:55 executing program 0: unshare(0x4000000a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:55 executing program 2: unshare(0x40000104) 11:08:55 executing program 3: unshare(0x40000132) 11:08:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000280)=@ax25={{0x3, @default}, [@default, @bcast, @default, @netrom, @netrom, @null, @default, @netrom]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000100)=""/19, 0x13}, {&(0x7f0000000980)=""/41, 0x23}, {&(0x7f0000000680)=""/235, 0xeb}], 0x8, &(0x7f0000000800)=""/215, 0x137}, 0x4}, {{&(0x7f0000000900)=@ax25={{0x3, @netrom}, [@remote, @default, @bcast, @rose, @null, @remote, @netrom]}, 0x80, &(0x7f0000000d40)}, 0x2}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)=""/17, 0x11}], 0x1, &(0x7f0000000e40)=""/233, 0xe9}, 0x3}, {{&(0x7f0000000f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)=""/186, 0xba}, {&(0x7f0000001080)=""/81, 0x51}, {&(0x7f0000001100)=""/224, 0xe0}], 0x3, &(0x7f0000001240)=""/18, 0x12}, 0x7}], 0x4, 0x100, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000001640)={'veth0_to_hsr\x00', {0x2, 0x4e24, @loopback}}) sendfile(r2, r1, 0x0, 0x100002a00) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x1000) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001680)={0x0, 0x4}, 0x8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6}, 0x5) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x148, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x6596889bbd3dc8b6, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf0f3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000}, 0x4010) 11:08:55 executing program 1: unshare(0x400000ca) 11:08:55 executing program 0: unshare(0x4000000c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:55 executing program 3: unshare(0x4000013a) 11:08:55 executing program 5: unshare(0x4000003a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 606.371587][ T28] audit: type=1804 audit(1592564935.676:314): pid=3626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/444/cgroup.controllers" dev="sda1" ino=16254 res=1 11:08:55 executing program 1: unshare(0x400000ce) 11:08:55 executing program 2: unshare(0x40000106) 11:08:55 executing program 3: unshare(0x4000013c) 11:08:55 executing program 2: unshare(0x40000112) 11:08:55 executing program 1: unshare(0x400000d2) 11:08:56 executing program 0: unshare(0x40000011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:56 executing program 3: unshare(0x40000144) 11:08:57 executing program 2: unshare(0x40000114) 11:08:57 executing program 5: unshare(0x40000044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:57 executing program 1: unshare(0x400000d4) 11:08:57 executing program 3: unshare(0x4000014c) 11:08:57 executing program 0: unshare(0x40000012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102b3a557e5000080080000000010000b0005"], 0x1}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x1}}, 0x20}}, 0x4000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r4, 0x8, 0x1, [0x6]}, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100002a00) 11:08:57 executing program 1: unshare(0x400000d8) 11:08:57 executing program 2: unshare(0x4000012c) 11:08:57 executing program 3: unshare(0x40000152) 11:08:57 executing program 5: unshare(0x40000046) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:57 executing program 0: unshare(0x40000014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:57 executing program 2: unshare(0x40000132) [ 608.470644][ T3707] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:08:57 executing program 1: unshare(0x400000da) 11:08:57 executing program 3: unshare(0x4000015a) 11:08:57 executing program 2: unshare(0x4000013a) 11:08:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc030000", @ANYRES16=r1, @ANYBLOB="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"], 0x3cc}}, 0x4800) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102efff80000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100002a00) 11:08:58 executing program 1: unshare(0x400000e2) 11:08:58 executing program 5: unshare(0x40000048) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:58 executing program 3: unshare(0x4000015c) 11:08:58 executing program 0: unshare(0x40000016) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:58 executing program 2: unshare(0x4000013c) 11:08:58 executing program 1: unshare(0x400000e6) 11:08:58 executing program 3: unshare(0x40000162) [ 608.960592][ T28] audit: type=1804 audit(1592564938.267:315): pid=3747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/446/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 608.993864][ T3747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:08:58 executing program 2: unshare(0x40000144) 11:08:58 executing program 1: unshare(0x400000e8) 11:08:58 executing program 5: unshare(0x4000004a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:58 executing program 3: unshare(0x40000164) 11:08:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007958e1c88c90cd610f94fe09f3b92be964a34b89adde349c636a40805cc9d942e6b65fd0ca8937f4df6cb43b11e400761672393ae27172a3d69775f209370d0eec3941ea376d70452e6391886abad11852b3bcee922ced66c36b50202541ed6e871ff7fc1a193dc4569766582da0beb28004aa5e154d8d4974a66f49de3b8b3bc315b22c97b75727236f3515543ce214d596d1f2b069c39024ee324579098af70104d3a5b2b43a8d0833a6b3ca48d31ce521a96c9c5d220f5f010624bd826379c0b52fe4a77a267ba599bc0afae9fa83a6857007ea3835f83f9583911961ca3b8165e0e7c67a5c0b2ab18ffcf9a22cbc16d25"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:08:58 executing program 2: unshare(0x4000014c) 11:08:58 executing program 0: unshare(0x4000001a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:58 executing program 1: unshare(0x400000ea) 11:08:58 executing program 3: unshare(0x4000016c) 11:08:58 executing program 5: unshare(0x4000004c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:58 executing program 1: unshare(0x400000ec) 11:08:58 executing program 2: unshare(0x40000152) 11:08:59 executing program 3: unshare(0x4000018c) 11:08:59 executing program 2: unshare(0x4000015a) 11:08:59 executing program 1: unshare(0x400000f0) 11:08:59 executing program 3: unshare(0x4000019c) 11:08:59 executing program 0: unshare(0x4000002a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:59 executing program 5: unshare(0x40000052) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:59 executing program 1: unshare(0x400000f2) 11:08:59 executing program 2: unshare(0x40000162) 11:08:59 executing program 3: unshare(0x400001a4) 11:08:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffbff, @dev={0xfe, 0x80, [], 0x2f}, 0x1}}, 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES64=r3], 0x1}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x80}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100002a00) 11:08:59 executing program 1: unshare(0x400000f4) 11:08:59 executing program 0: unshare(0x40000038) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:59 executing program 2: unshare(0x40000164) 11:08:59 executing program 3: unshare(0x400001ac) 11:08:59 executing program 5: unshare(0x4000005a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:59 executing program 1: unshare(0x400000fa) [ 610.372332][ T3881] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 610.415441][ T3876] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:08:59 executing program 2: unshare(0x4000016c) [ 610.455762][ T3876] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 610.483408][ T3876] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:08:59 executing program 3: unshare(0x400001b0) 11:08:59 executing program 0: unshare(0x4000003a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:08:59 executing program 1: unshare(0x400000fc) 11:09:00 executing program 2: unshare(0x4000018c) 11:09:00 executing program 3: unshare(0x400001bc) 11:09:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x60000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:00 executing program 5: unshare(0x4000005c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:00 executing program 1: unshare(0x40000104) [ 610.877143][ T3923] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:00 executing program 2: unshare(0x4000019c) 11:09:00 executing program 0: unshare(0x40000046) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:00 executing program 3: unshare(0x400001c2) 11:09:00 executing program 1: unshare(0x40000106) 11:09:00 executing program 2: unshare(0x400001a4) 11:09:00 executing program 5: unshare(0x40000060) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:00 executing program 3: unshare(0x400001c6) 11:09:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f0000000300)={r3}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f0000000300)=0x8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000065c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000006680)={&(0x7f0000006580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006640)={&(0x7f0000006600)={0x20, r7, 0x1, 0x5, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000}, 0x4010) sendfile(r5, r4, 0x0, 0x100002a00) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xd2, "640a098b3600f36c9f9d98cd38bf808db0b7f31eadff865e6d297f7f1ce54ffb8cb7a5174f0d2752648e76ddb887522ebde46c5a48975f39022f1d25875ddbe4737eb620fc23980e84eea98a1434b47a2c1f448d943bfc10a1920467af441d517c0706ef8d441d8aaf0a94e73acedf32b9b4c03e5d7e77c0597fc363eb7d89f2862ef9bff8213884105b15e8a89bcc581094634a2aa0ad8d56e1211b46e5ec455e47e5ba3cb3d00b0dfd6064912c13a298fe79af4ca4f89605e9c43754dc5c3dc999fee0f344412c91f8313ed474b4991415"}, &(0x7f0000000040)=0xda) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100)=r8, 0x4) 11:09:00 executing program 0: unshare(0x40000048) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:00 executing program 1: unshare(0x4000010c) 11:09:00 executing program 2: unshare(0x400001ac) 11:09:00 executing program 3: unshare(0x400001c8) 11:09:00 executing program 5: unshare(0x40000068) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 611.587651][ T28] audit: type=1804 audit(1592564940.897:316): pid=3961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/450/cgroup.controllers" dev="sda1" ino=16239 res=1 [ 611.622803][ T3961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:01 executing program 1: unshare(0x40000114) 11:09:01 executing program 2: unshare(0x400001bc) 11:09:01 executing program 3: unshare(0x400001cf) 11:09:01 executing program 0: unshare(0x4000004a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:01 executing program 3: unshare(0x400001d4) 11:09:01 executing program 2: unshare(0x400001c2) 11:09:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:01 executing program 5: unshare(0x4000006c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:01 executing program 1: unshare(0x4000011a) 11:09:01 executing program 3: unshare(0x400001e0) 11:09:01 executing program 2: unshare(0x400001c6) 11:09:01 executing program 0: unshare(0x4000004c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:01 executing program 3: unshare(0x400001e2) 11:09:01 executing program 2: unshare(0x400001cf) 11:09:01 executing program 1: unshare(0x40000130) [ 612.451878][ T4035] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:01 executing program 5: unshare(0x40000072) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:01 executing program 0: unshare(0x40000050) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 612.534637][ T28] audit: type=1804 audit(1592564941.837:317): pid=4029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/451/cgroup.controllers" dev="sda1" ino=16239 res=1 [ 612.541859][ T4029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:01 executing program 3: unshare(0x400001f4) 11:09:02 executing program 2: unshare(0x400001d4) 11:09:02 executing program 1: unshare(0x40000132) 11:09:02 executing program 5: unshare(0x40000074) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:02 executing program 3: unshare(0x400001fc) 11:09:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r3, 0x193}, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100002a00) 11:09:02 executing program 0: unshare(0x40000052) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:02 executing program 2: unshare(0x400001e0) 11:09:02 executing program 3: unshare(0x40000204) 11:09:02 executing program 1: unshare(0x4000013a) [ 613.349852][ T4086] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 613.410617][ T4095] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:02 executing program 5: unshare(0x4000007a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:02 executing program 0: unshare(0x4000005a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 613.480868][ T28] audit: type=1804 audit(1592564942.787:318): pid=4085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/452/cgroup.controllers" dev="sda1" ino=16282 res=1 [ 613.490722][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:02 executing program 3: unshare(0x40000208) 11:09:02 executing program 2: unshare(0x400001e2) 11:09:02 executing program 1: unshare(0x4000013c) 11:09:03 executing program 3: unshare(0x4000020c) 11:09:03 executing program 2: unshare(0x400001f4) [ 614.091294][ T28] audit: type=1804 audit(1592564943.407:319): pid=4086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/452/cgroup.controllers" dev="sda1" ino=16282 res=1 11:09:03 executing program 1: unshare(0x40000144) 11:09:03 executing program 5: unshare(0x40000082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:03 executing program 2: unshare(0x400001fc) 11:09:03 executing program 0: unshare(0x4000005c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:03 executing program 3: unshare(0x40000224) 11:09:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getpeername(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000040)=0x80) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={[], 0x24}, 'veth0_macvtap\x00'}}) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2885d0c3ddf900052bc1c92f8dfa0900dfece4460200000000", @ANYRES16=r2, @ANYBLOB="4c58dee9ab433ae7fa97fbcd84995db7f3d731319902c148485be62c9bfccbfffd45691c63c31bd141bd6ca3fa2f5e9da42470b67a5f5ea2a1b7744edb882c1048e2c3e86f6e602006d20e5b27bb1c114fbaeaf911831643ba61a5ec08b2b06bc9224ca5ebb464fcf93da96c30b01d25fb63bf2dbac18a2233b2ee45f21c6a39"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x10) shutdown(r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100002a00) 11:09:03 executing program 2: unshare(0x40000204) 11:09:03 executing program 3: unshare(0x4000022a) [ 614.300132][ T4144] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:03 executing program 1: unshare(0x4000014c) [ 614.343148][ T4139] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 614.372878][ T28] audit: type=1804 audit(1592564943.677:320): pid=4139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/453/cgroup.controllers" dev="sda1" ino=16380 res=1 11:09:03 executing program 5: unshare(0x40000088) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum}) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:03 executing program 0: unshare(0x40000060) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:03 executing program 2: unshare(0x40000208) 11:09:03 executing program 1: unshare(0x4000014e) 11:09:03 executing program 3: unshare(0x40000230) 11:09:04 executing program 2: unshare(0x4000020c) 11:09:04 executing program 3: unshare(0x4000023a) [ 614.721211][ T28] audit: type=1804 audit(1592564944.027:321): pid=4167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/454/cgroup.controllers" dev="sda1" ino=16293 res=1 [ 614.766933][ T4167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:04 executing program 1: unshare(0x40000152) 11:09:04 executing program 2: unshare(0x40000224) 11:09:04 executing program 5: unshare(0x4000008e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:04 executing program 3: unshare(0x4000023c) 11:09:04 executing program 0: unshare(0x40000068) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4009811, r1, 0x5f5b3000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:04 executing program 2: unshare(0x4000022a) 11:09:04 executing program 3: unshare(0x4000023e) 11:09:04 executing program 1: unshare(0x4000015a) 11:09:04 executing program 5: unshare(0x400000ba) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:04 executing program 0: unshare(0x4000006c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:04 executing program 2: unshare(0x4000023a) [ 615.412754][ T4227] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:04 executing program 3: unshare(0x40000248) 11:09:04 executing program 1: unshare(0x40000160) 11:09:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:05 executing program 5: unshare(0x400000c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:05 executing program 2: unshare(0x4000023c) 11:09:05 executing program 3: unshare(0x4000024a) 11:09:05 executing program 0: unshare(0x40000072) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:05 executing program 1: unshare(0x40000162) 11:09:05 executing program 2: unshare(0x4000023e) 11:09:05 executing program 5: unshare(0x400000c6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 615.953482][ T4259] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:05 executing program 1: unshare(0x40000164) [ 615.998972][ T4267] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 616.023293][ T28] audit: type=1804 audit(1592564945.327:322): pid=4267 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/456/cgroup.controllers" dev="sda1" ino=16287 res=1 11:09:05 executing program 3: unshare(0x40000250) 11:09:05 executing program 2: unshare(0x40000248) 11:09:05 executing program 0: unshare(0x40000074) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000200)="c46de0594fab1f46bc1c86d426d0f9249e12cdf235b89a7f79e477984931a786895d62c5e7ff0f7d3268c222b397721fdcdd", 0x32, 0x3) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000040601020900000000000000100017000500010007e626e5078f2f0a1d3bf298413b0960cf6bd929"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000002c0), &(0x7f0000000180)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x2, 0x44b) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000040)=0x1f1b, &(0x7f0000000100)=0x4) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:05 executing program 1: unshare(0x40000168) 11:09:05 executing program 2: unshare(0x4000024f) 11:09:05 executing program 3: unshare(0x40000254) 11:09:05 executing program 5: unshare(0x400000c8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:05 executing program 0: unshare(0x4000007a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:05 executing program 1: unshare(0x4000016a) 11:09:05 executing program 3: unshare(0x40000256) 11:09:05 executing program 2: unshare(0x40000251) 11:09:06 executing program 1: unshare(0x4000016c) [ 616.689851][ T28] audit: type=1804 audit(1592564945.997:323): pid=4314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/457/cgroup.controllers" dev="sda1" ino=16262 res=1 11:09:06 executing program 5: unshare(0x400000ca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:06 executing program 3: unshare(0x40000260) 11:09:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x7dcc1000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x40) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x1}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='pids.events\x00', 0xb00000000065808, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) write(r3, &(0x7f0000000200)="ffc6ebdc0de204cb0510420396686d8d646dba9f1c7d8fb36c6c73824818ddfa148d7f440ba00068ad3d8b9052c0eec88efde2ef9039218faf027c0f9f994bde210debac9d51ee8b6036d78e5ac586cc3a8b6ff273cd49b815146732d5d5104c", 0x60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100002a00) 11:09:06 executing program 2: unshare(0x40000254) 11:09:06 executing program 1: unshare(0x40000172) 11:09:06 executing program 0: unshare(0x4000007c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:06 executing program 3: unshare(0x40000272) 11:09:06 executing program 5: unshare(0x400000ce) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:06 executing program 2: unshare(0x4000025c) 11:09:06 executing program 3: unshare(0x40000274) 11:09:06 executing program 1: unshare(0x4000018c) 11:09:06 executing program 5: unshare(0x400000d2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:06 executing program 0: unshare(0x40000082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 617.533993][ T4382] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:06 executing program 2: unshare(0x40000260) [ 618.211170][ T4377] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:07 executing program 1: unshare(0x40000192) 11:09:07 executing program 3: unshare(0x4000027a) 11:09:07 executing program 2: unshare(0x40000268) 11:09:07 executing program 0: unshare(0x40000088) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:07 executing program 5: unshare(0x400000e2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:07 executing program 3: unshare(0x4000027c) 11:09:07 executing program 2: unshare(0x40000272) 11:09:07 executing program 1: unshare(0x40000196) 11:09:08 executing program 0: unshare(0x4000008a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xe78}}]}, {0x0, [0x30, 0x5f, 0x61, 0x0, 0x5f]}}, &(0x7f0000000200)=""/143, 0x37, 0x8f}, 0x20) 11:09:08 executing program 3: unshare(0x40000280) 11:09:08 executing program 1: unshare(0x4000019c) 11:09:08 executing program 5: unshare(0x400000f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:08 executing program 2: unshare(0x40000274) 11:09:08 executing program 1: unshare(0x400001a2) [ 618.959632][ T4448] IPVS: ftp: loaded support on port[0] = 21 [ 618.990903][ T28] audit: type=1804 audit(1592564948.297:324): pid=4446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/460/cgroup.controllers" dev="sda1" ino=16303 res=1 [ 619.021986][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:08 executing program 2: unshare(0x4000027a) 11:09:08 executing program 1: unshare(0x400001a4) 11:09:08 executing program 0: unshare(0x4000008c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:08 executing program 5: unshare(0x400000f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:08 executing program 2: unshare(0x4000027c) 11:09:08 executing program 1: unshare(0x400001a8) [ 619.379176][ T4448] IPVS: ftp: loaded support on port[0] = 21 11:09:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r4, 0x2}, 0x8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:09 executing program 0: unshare(0x4000008e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:09 executing program 2: unshare(0x40000280) 11:09:09 executing program 1: unshare(0x400001bc) 11:09:09 executing program 3: unshare(0x4000029a) 11:09:09 executing program 5: unshare(0x400000fa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 619.731708][ T4528] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:09 executing program 1: unshare(0x400001c2) [ 619.850149][ T28] audit: type=1804 audit(1592564949.157:325): pid=4534 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/461/cgroup.controllers" dev="sda1" ino=16030 res=1 [ 619.886638][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:09 executing program 3: unshare(0x400002ac) 11:09:09 executing program 0: unshare(0x400000ba) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 619.987261][ T4553] IPVS: ftp: loaded support on port[0] = 21 11:09:09 executing program 5: unshare(0x40000106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:09 executing program 1: unshare(0x400001c6) 11:09:09 executing program 3: unshare(0x400002b2) 11:09:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b00050001000762b6feb57b0eaf2be770a02147a77d7190ba67ee576766"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_delrule={0x5c, 0x21, 0x4, 0x70bd25, 0x25dfdbfc, {0xa, 0x20, 0x14, 0xc5, 0x4, 0x0, 0x0, 0x6, 0x10006}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2cd5}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3ff}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x240400c5) 11:09:09 executing program 1: unshare(0x400001cc) [ 620.466434][ T4553] IPVS: ftp: loaded support on port[0] = 21 [ 620.643628][ T4614] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:10 executing program 2: unshare(0x4000028e) 11:09:10 executing program 3: unshare(0x400002c4) 11:09:10 executing program 0: unshare(0x400000c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:10 executing program 5: unshare(0x40000114) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:10 executing program 1: unshare(0x400001ce) 11:09:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xc}, @local, 0x0, 0x7, [@multicast1, @multicast2, @private=0xa010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @remote]}, 0x2c) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000100)=0x7fffffff, 0x4) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:10 executing program 1: unshare(0x400001cf) 11:09:10 executing program 3: unshare(0x400002cc) [ 620.982956][ T28] audit: type=1804 audit(1592564950.288:326): pid=4644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/463/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 621.017362][ T4644] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:10 executing program 0: unshare(0x400000c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:10 executing program 2: unshare(0x4000029a) [ 621.059370][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:10 executing program 5: unshare(0x40000132) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:10 executing program 1: unshare(0x400001d2) 11:09:10 executing program 3: unshare(0x400002d4) 11:09:10 executing program 2: unshare(0x400002ac) 11:09:10 executing program 0: unshare(0x400000c6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:10 executing program 3: unshare(0x400002da) 11:09:10 executing program 1: unshare(0x400001d4) [ 621.684967][ T28] audit: type=1804 audit(1592564950.988:327): pid=4652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/463/cgroup.controllers" dev="sda1" ino=16379 res=1 11:09:11 executing program 5: unshare(0x4000013a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:11 executing program 2: unshare(0x400002b2) 11:09:11 executing program 1: unshare(0x400001e2) 11:09:11 executing program 0: unshare(0x400000c8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:11 executing program 3: unshare(0x400002dc) 11:09:11 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) accept4$x25(r0, &(0x7f0000000000), &(0x7f00000017c0)=0x12, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0xa, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x30}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1434, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x13fc, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c923c5f2b0c847d1c2fe9b8fb39e0631246c9d9c7ea46d550294c810832e1ab8"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03040000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="df59bb823d300fb7b4ba7071f66a25288b1cc57532d21af93d14c67c471006cb04d8872d922b0600a13c5a15cf0000000000000000b936ee4ce45f4b4a4f7ee55fcc26e57919e896569b3e746ada898be9dc48e5fe0d024c0690d43202a2535619d77bb8505f771400000000000000000000873b525991073d61b4d2f80fa5649ad71b159283ddc7214184eb9f846af05b23e76eda74fd08ccf98ade573179c5f78de9d112df92b9a2bd78607860174b0636c35b75c530487e4cd74a49c9d6138fce9c1a283825b9cce295ebe3c4a9eb26888419d1d0d85fc14d236f351b57"], 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x5e, r4}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:12 executing program 5: unshare(0x4000014e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:12 executing program 0: unshare(0x400000d2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:12 executing program 2: unshare(0x400002ea) 11:09:12 executing program 1: unshare(0x400001f4) [ 623.133641][ T4803] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:12 executing program 3: unshare(0x4000030e) [ 623.280786][ T28] audit: type=1804 audit(1592564952.588:329): pid=4807 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/466/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 623.315816][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:12 executing program 2: unshare(0x400002f2) 11:09:12 executing program 1: unshare(0x400001f6) 11:09:12 executing program 3: unshare(0x40000312) 11:09:12 executing program 0: unshare(0x400000e2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:12 executing program 5: unshare(0x4000015a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:12 executing program 3: unshare(0x4000031a) 11:09:13 executing program 5: unshare(0x40000160) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:13 executing program 2: unshare(0x400002fa) 11:09:13 executing program 1: unshare(0x400001fc) 11:09:13 executing program 3: unshare(0x4000031c) 11:09:13 executing program 0: unshare(0x400000f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x1}) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) write$binfmt_script(r0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES64=r2, @ANYBLOB="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"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:13 executing program 2: unshare(0x40000300) 11:09:13 executing program 1: unshare(0x40000204) 11:09:13 executing program 3: unshare(0x40000324) [ 624.022927][ T4865] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 624.078692][ T4865] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 624.117895][ T4865] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:13 executing program 5: unshare(0x40000164) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:13 executing program 1: unshare(0x40000208) [ 624.231030][ T28] audit: type=1804 audit(1592564953.538:330): pid=4865 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/467/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 624.246834][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:13 executing program 3: unshare(0x40000328) 11:09:13 executing program 2: unshare(0x4000030a) 11:09:13 executing program 0: unshare(0x400000f2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:13 executing program 1: unshare(0x4000020a) 11:09:13 executing program 3: unshare(0x4000032a) 11:09:13 executing program 2: unshare(0x4000030c) [ 624.810877][ T28] audit: type=1804 audit(1592564954.118:331): pid=4872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/467/cgroup.controllers" dev="sda1" ino=16371 res=1 11:09:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendfile(r1, r2, 0x0, 0x6) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$FITHAW(r5, 0xc0045878) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:14 executing program 5: unshare(0x4000016c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:14 executing program 0: unshare(0x400000f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:14 executing program 1: unshare(0x4000020c) 11:09:14 executing program 3: unshare(0x40000332) 11:09:14 executing program 2: unshare(0x4000030e) 11:09:14 executing program 1: unshare(0x40000212) 11:09:14 executing program 3: unshare(0x40000334) 11:09:14 executing program 2: unshare(0x40000310) [ 625.077844][ T4933] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:14 executing program 5: unshare(0x4000018c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 625.137228][ T4942] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:14 executing program 1: unshare(0x4000021c) 11:09:14 executing program 2: unshare(0x40000312) [ 625.248062][ T4942] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 625.248386][ T28] audit: type=1804 audit(1592564954.558:332): pid=4942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/468/cgroup.controllers" dev="sda1" ino=16005 res=1 11:09:14 executing program 3: unshare(0x40000336) 11:09:14 executing program 0: unshare(0x400000fa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:14 executing program 1: unshare(0x40000222) 11:09:14 executing program 2: unshare(0x40000314) 11:09:14 executing program 5: unshare(0x4000019c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendto$rose(r1, &(0x7f0000000200)="2fcb1a8f7ffc1b2e4b9b7b7f56620dd7f1a368d052b6204d47e93d713ea0d7dea4a44ba7e791fbd029320c5c0405d2cff4226b847cbc190caacc216e3d29dcc17c8f9d0b0caf6e2f14d52771534b905c30c396b1d8d47fa92aeac42e9324b223a7f2f8d6ba956dbf7919ec5298c8d7328d7eeb4b1cf634ef64ea90cae2d1e3a2028f3cb0be012fecb56d", 0x8a, 0x4000010, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:15 executing program 3: unshare(0x4000033a) 11:09:15 executing program 1: unshare(0x40000224) [ 625.789793][ T4981] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:15 executing program 2: unshare(0x4000031a) 11:09:15 executing program 5: unshare(0x400001ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:15 executing program 0: unshare(0x400000fc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:15 executing program 3: unshare(0x4000033c) 11:09:15 executing program 1: unshare(0x4000022a) 11:09:15 executing program 2: unshare(0x4000031c) 11:09:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r4) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) accept4$inet6(r4, 0x0, &(0x7f0000000100), 0x81000) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:15 executing program 2: unshare(0x40000324) 11:09:15 executing program 1: unshare(0x4000023a) [ 626.240058][ T5014] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:15 executing program 3: unshare(0x40000342) 11:09:15 executing program 5: unshare(0x400001b4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:15 executing program 0: unshare(0x40000102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x81000) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000020010000b000520010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x48, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private2}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x10000}]}, &(0x7f0000000280)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r2, 0x0, 0x100002a00) 11:09:15 executing program 2: unshare(0x4000032a) 11:09:15 executing program 1: unshare(0x4000023c) 11:09:15 executing program 3: unshare(0x40000344) 11:09:15 executing program 2: unshare(0x40000332) 11:09:15 executing program 5: unshare(0x400001bc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:16 executing program 1: unshare(0x4000023e) 11:09:16 executing program 3: unshare(0x40000356) 11:09:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x3f, 0x679}, 0x8) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x19, @remote, 0x800}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x19}, 0x7}, 0x8, [0xfffffff8, 0xffff, 0x2, 0x4, 0xffff7fff, 0x8, 0x6, 0x800]}, 0x5c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100002a00) 11:09:16 executing program 0: unshare(0x40000104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:16 executing program 2: unshare(0x40000334) 11:09:16 executing program 1: unshare(0x40000242) 11:09:16 executing program 5: unshare(0x400001cf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:16 executing program 3: unshare(0x40000357) 11:09:16 executing program 3: unshare(0x40000358) 11:09:16 executing program 1: unshare(0x40000244) 11:09:16 executing program 2: unshare(0x40000336) [ 627.166745][ T5086] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:16 executing program 0: unshare(0x40000106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004460102000080000000000010000b000500010007145520571e2b239086245aaad268e85c51d83fc5b678a6ad40bd84589cc9ac8a505cacbbbd6d47e1cff03b95169ec9b9631476888929c9cf46f7c576f1415aece198e893feafbb7f799bdcba409f329978b6a9e5646a1a9328876d56b395d1b4393e54e2f52c"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, 0x140f, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getpeername$netlink(r3, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:16 executing program 3: unshare(0x4000035a) 11:09:16 executing program 1: unshare(0x40000248) 11:09:16 executing program 2: unshare(0x4000033a) 11:09:16 executing program 5: unshare(0x400001f2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:16 executing program 2: unshare(0x4000033c) 11:09:16 executing program 1: unshare(0x4000024a) 11:09:16 executing program 3: unshare(0x4000035c) [ 627.559051][ T28] audit: type=1804 audit(1592564956.868:333): pid=5112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/473/cgroup.controllers" dev="sda1" ino=15985 res=1 11:09:16 executing program 0: unshare(0x40000114) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 627.606811][ T5112] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:17 executing program 2: unshare(0x40000342) 11:09:17 executing program 3: unshare(0x4000035e) 11:09:17 executing program 1: unshare(0x4000024c) 11:09:17 executing program 5: unshare(0x400001f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:17 executing program 2: unshare(0x40000344) 11:09:17 executing program 3: unshare(0x40000362) 11:09:17 executing program 0: unshare(0x40000122) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:17 executing program 1: unshare(0x40000254) 11:09:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000070000000000000005000000480300005001000008020000500100000802d00008020000b0020000b0020000b0020000b0020000b0020000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534e415400000000000000000000000000000000000000000000000000000100000000000000ac1414bbe0eeff020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a800000000000000000000000000000000000000000038004e45544d41500000000000000000000000000000000000000000000000000100000000000000e0000002ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000007000b80000000000000000000000000000000000000000004800444e4154000000000000000000000000000000000000000000000000000100000000fe8000000000000000000000000000aaac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a51b000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800444e415400000000000000000000000000000000000000000000000000000100000000000000e0000001ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fe"], 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r3], 0x3}, 0x1, 0xfffffff0, 0x0, 0x4800}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000fc50d83d2e2aba6895c8734673630ed88017040601"], 0x1}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x7fffffff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100002a00) 11:09:17 executing program 3: unshare(0x40000364) 11:09:17 executing program 2: unshare(0x4000034a) 11:09:17 executing program 0: unshare(0x40000132) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:17 executing program 1: unshare(0x40000256) 11:09:17 executing program 5: unshare(0x40000204) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:17 executing program 3: unshare(0x40000368) 11:09:17 executing program 2: unshare(0x40000356) [ 628.349978][ T28] audit: type=1804 audit(1592564957.658:334): pid=5178 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/474/cgroup.controllers" dev="sda1" ino=15795 res=1 11:09:17 executing program 1: unshare(0x4000025a) 11:09:17 executing program 3: unshare(0x4000036a) 11:09:17 executing program 2: unshare(0x40000357) 11:09:17 executing program 3: unshare(0x4000036c) 11:09:19 executing program 0: unshare(0x4000013a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:19 executing program 1: unshare(0x4000025c) 11:09:19 executing program 5: unshare(0x40000208) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:19 executing program 2: unshare(0x40000358) 11:09:19 executing program 3: unshare(0x4000036e) 11:09:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendfile(r0, r1, 0x0, 0x1) 11:09:19 executing program 2: unshare(0x4000035a) 11:09:19 executing program 5: unshare(0x4000020c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:19 executing program 1: unshare(0x40000260) 11:09:19 executing program 3: unshare(0x40000374) 11:09:19 executing program 0: unshare(0x4000013c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 630.217529][ T28] audit: type=1804 audit(1592564959.528:335): pid=5243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/475/cgroup.controllers" dev="sda1" ino=16355 res=1 [ 630.256739][ T5243] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:19 executing program 2: unshare(0x4000035c) [ 630.302601][ T5247] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:19 executing program 1: unshare(0x40000262) 11:09:19 executing program 2: unshare(0x4000035e) 11:09:19 executing program 3: unshare(0x4000037a) 11:09:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getpeername(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000040)=0x80) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x24, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x80) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:19 executing program 5: unshare(0x4000021c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:19 executing program 0: unshare(0x40000142) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:19 executing program 1: unshare(0x40000268) 11:09:20 executing program 3: unshare(0x40000382) 11:09:20 executing program 2: unshare(0x40000362) 11:09:20 executing program 1: unshare(0x40000272) [ 630.777846][ T28] audit: type=1804 audit(1592564960.088:336): pid=5283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/476/cgroup.controllers" dev="sda1" ino=16333 res=1 [ 630.806520][ T5283] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 630.857806][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:20 executing program 3: unshare(0x40000384) 11:09:20 executing program 2: unshare(0x40000364) 11:09:20 executing program 5: unshare(0x40000224) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:20 executing program 0: unshare(0x40000144) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:20 executing program 2: unshare(0x40000368) 11:09:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x81000) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2880000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000240)=0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x9) 11:09:20 executing program 3: unshare(0x4000038a) 11:09:20 executing program 1: unshare(0x40000274) 11:09:20 executing program 2: unshare(0x4000036a) 11:09:20 executing program 5: unshare(0x4000023a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:20 executing program 0: unshare(0x4000014c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:20 executing program 1: unshare(0x4000027a) 11:09:20 executing program 3: unshare(0x4000038e) [ 631.470642][ T5345] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:20 executing program 2: unshare(0x4000036c) [ 631.545956][ T5348] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000200)=""/220, 0xdc, 0x10000, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendfile(r4, r5, 0x0, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) 11:09:21 executing program 1: unshare(0x4000027c) 11:09:21 executing program 5: unshare(0x4000024c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:21 executing program 2: unshare(0x40000372) 11:09:21 executing program 3: unshare(0x40000394) 11:09:21 executing program 1: unshare(0x4000028c) 11:09:21 executing program 0: unshare(0x4000014e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:21 executing program 3: unshare(0x40000398) 11:09:21 executing program 2: unshare(0x40000374) [ 631.968343][ T5376] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 632.002422][ T5376] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:21 executing program 1: unshare(0x40000292) [ 632.048422][ T5384] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:21 executing program 5: unshare(0x40000264) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:21 executing program 3: unshare(0x4000039c) 11:09:21 executing program 2: unshare(0x4000037a) 11:09:21 executing program 1: unshare(0x4000029a) 11:09:21 executing program 0: unshare(0x40000152) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:21 executing program 3: unshare(0x400003a2) 11:09:21 executing program 1: unshare(0x4000029e) 11:09:21 executing program 5: unshare(0x40000266) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:21 executing program 2: unshare(0x40000382) 11:09:21 executing program 1: unshare(0x400002ac) 11:09:21 executing program 3: unshare(0x400003a4) 11:09:22 executing program 2: unshare(0x40000384) 11:09:22 executing program 0: unshare(0x4000015a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:22 executing program 3: unshare(0x400003ac) 11:09:22 executing program 5: unshare(0x40000268) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:22 executing program 1: unshare(0x400002ae) 11:09:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x93cc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004080}, 0x44080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x100002a00) 11:09:22 executing program 2: unshare(0x40000388) 11:09:22 executing program 5: unshare(0x40000272) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 632.937845][ T5458] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 632.975583][ T5458] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:22 executing program 3: unshare(0x400003b2) 11:09:22 executing program 1: unshare(0x400002b2) 11:09:22 executing program 0: unshare(0x40000162) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:22 executing program 2: unshare(0x4000038a) 11:09:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x13) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) ioctl$sock_ifreq(r4, 0x8937, &(0x7f0000002600)={'vcan0\x00', @ifru_addrs=@can={0x1d, r7}}) sendmsg$nl_route_sched(r3, &(0x7f00000026c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)=@gettfilter={0x34, 0x2e, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0x4, 0x5}, {0x9, 0x4}}, [{0x8, 0xb, 0xce9}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc810}, 0x800) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:22 executing program 3: unshare(0x400003b4) 11:09:22 executing program 5: unshare(0x40000280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:22 executing program 1: unshare(0x400002b4) 11:09:22 executing program 2: unshare(0x4000038e) 11:09:22 executing program 0: unshare(0x40000164) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:22 executing program 3: unshare(0x400003ba) [ 633.485814][ T28] audit: type=1804 audit(1592564962.799:337): pid=5498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/480/cgroup.controllers" dev="sda1" ino=15843 res=1 [ 633.562026][ T5507] IPVS: ftp: loaded support on port[0] = 21 11:09:22 executing program 2: unshare(0x40000394) 11:09:22 executing program 1: unshare(0x400002ba) [ 633.646535][ T5521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:23 executing program 3: unshare(0x400003bc) 11:09:23 executing program 0: unshare(0x4000016c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:23 executing program 1: unshare(0x400002c2) [ 634.013283][ T5507] IPVS: ftp: loaded support on port[0] = 21 11:09:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007f2ea05d7349478fc0fac683fa6d8b547ea5c9b66b6a8cae221759d7b35dd4d8eab21ecdfd3d5a3cfea1af38b51ce10e79112d8126a9464fa6d517ec7bd86688dbbf2c958208ade0fe2b5ebc7501808a9824ccf30076e0aced8375f4caad3385540cac40226054a9f94c3ea8a9e4f0310747edb3c108fe1c41a754ce189afa3b815cdd7bc07ef8c20f42f87ee8d8c53e937daf4e4c34d31187e735b3608b2ab"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r3) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) accept4$inet6(r3, 0x0, &(0x7f0000000100), 0x81000) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) 11:09:23 executing program 2: unshare(0x40000398) 11:09:23 executing program 5: unshare(0x40000286) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:23 executing program 3: unshare(0x400003c0) 11:09:23 executing program 1: unshare(0x400002c4) 11:09:23 executing program 0: unshare(0x4000017e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:23 executing program 2: unshare(0x4000039c) 11:09:23 executing program 3: unshare(0x400003c8) 11:09:23 executing program 1: unshare(0x400002ca) [ 634.457247][ T28] audit: type=1804 audit(1592564963.769:338): pid=5599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/481/cgroup.controllers" dev="sda1" ino=16380 res=1 11:09:23 executing program 2: unshare(0x400003a2) 11:09:23 executing program 1: unshare(0x400002cc) 11:09:23 executing program 0: unshare(0x40000184) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', r6}) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:24 executing program 5: unshare(0x4000029a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:24 executing program 3: unshare(0x400003ca) 11:09:24 executing program 1: unshare(0x400002d0) 11:09:24 executing program 2: unshare(0x400003a4) 11:09:24 executing program 0: unshare(0x4000018c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:24 executing program 2: unshare(0x400003ac) 11:09:24 executing program 1: unshare(0x400002d4) 11:09:24 executing program 3: unshare(0x400003cc) 11:09:24 executing program 0: unshare(0x4000019c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:24 executing program 5: unshare(0x400002b2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 635.252956][ T28] audit: type=1804 audit(1592564964.559:339): pid=5652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/482/cgroup.controllers" dev="sda1" ino=15845 res=1 [ 635.280988][ T5652] validate_nla: 7 callbacks suppressed [ 635.281000][ T5652] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:24 executing program 2: unshare(0x400003b2) [ 635.386195][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:25 executing program 3: unshare(0x400003d0) 11:09:25 executing program 1: unshare(0x400002d8) 11:09:25 executing program 0: unshare(0x4000019e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:25 executing program 2: unshare(0x400003b4) 11:09:25 executing program 5: unshare(0x400002c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004880) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:25 executing program 3: unshare(0x400003d2) 11:09:25 executing program 2: unshare(0x400003ba) 11:09:25 executing program 1: unshare(0x400002da) [ 635.980581][ T5712] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 636.027985][ T5704] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:25 executing program 5: unshare(0x400002c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:25 executing program 0: unshare(0x400001a4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 636.059800][ T28] audit: type=1804 audit(1592564965.369:340): pid=5704 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/483/cgroup.controllers" dev="sda1" ino=15733 res=1 11:09:25 executing program 3: unshare(0x400003d4) 11:09:25 executing program 1: unshare(0x400002dc) 11:09:25 executing program 2: unshare(0x400003bc) 11:09:25 executing program 1: unshare(0x400002de) 11:09:25 executing program 3: unshare(0x400003da) 11:09:25 executing program 2: unshare(0x400003c8) 11:09:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x10000, 0x5, 0x3cd6, 0x5}, &(0x7f0000000040)=0x98) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100002a00) 11:09:25 executing program 5: unshare(0x400002cc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:25 executing program 0: unshare(0x400001ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:25 executing program 2: unshare(0x400003ca) 11:09:25 executing program 1: unshare(0x400002e4) 11:09:25 executing program 3: unshare(0x400003e4) 11:09:26 executing program 2: unshare(0x400003cc) 11:09:26 executing program 5: unshare(0x400002d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 636.780948][ T28] audit: type=1804 audit(1592564966.089:341): pid=5762 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/484/cgroup.controllers" dev="sda1" ino=16384 res=1 11:09:26 executing program 3: unshare(0x400003e6) 11:09:26 executing program 0: unshare(0x400001b4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:26 executing program 1: unshare(0x400002ea) 11:09:26 executing program 2: unshare(0x400003d0) 11:09:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000100)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100002a00) 11:09:26 executing program 5: unshare(0x400002d8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:26 executing program 3: unshare(0x400003ea) 11:09:26 executing program 2: unshare(0x400003d2) 11:09:26 executing program 1: unshare(0x400002ee) 11:09:26 executing program 0: unshare(0x400001bc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:26 executing program 3: unshare(0x400003ec) 11:09:26 executing program 1: unshare(0x400002f2) 11:09:26 executing program 2: unshare(0x400003d4) 11:09:26 executing program 5: unshare(0x400002dc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:26 executing program 0: unshare(0x400001c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:26 executing program 3: unshare(0x400003ee) 11:09:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x2cc, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x205}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe000000}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x51}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd5f, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @remote, 0x8}}}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x54a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffff1, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x845}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:27 executing program 2: unshare(0x400003d8) 11:09:27 executing program 1: unshare(0x400002fa) 11:09:27 executing program 3: unshare(0x400003f2) 11:09:27 executing program 5: unshare(0x400002ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 637.897972][ T5849] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:27 executing program 0: unshare(0x400001c6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:27 executing program 2: unshare(0x400003da) [ 637.946741][ T28] audit: type=1804 audit(1592564967.259:342): pid=5858 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/486/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 637.981703][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:27 executing program 1: unshare(0x400002fc) 11:09:27 executing program 3: unshare(0x400003f4) 11:09:27 executing program 2: unshare(0x400003dc) 11:09:27 executing program 5: unshare(0x400002fa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:27 executing program 1: unshare(0x40000300) 11:09:27 executing program 2: unshare(0x400003e0) 11:09:27 executing program 3: unshare(0x400003f8) 11:09:27 executing program 0: unshare(0x400001ca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:27 executing program 1: unshare(0x40000308) 11:09:27 executing program 5: unshare(0x400002fc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:27 executing program 2: unshare(0x400003e4) 11:09:27 executing program 3: unshare(0x400003fa) 11:09:28 executing program 1: unshare(0x4000030a) [ 638.751200][ T5916] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:28 executing program 0: unshare(0x400001cf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:28 executing program 5: unshare(0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 638.797746][ T28] audit: type=1804 audit(1592564968.109:343): pid=5923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/487/cgroup.controllers" dev="sda1" ino=16351 res=1 11:09:28 executing program 2: unshare(0x400003e6) 11:09:28 executing program 3: unshare(0x400003fc) 11:09:28 executing program 1: unshare(0x4000030c) 11:09:28 executing program 2: unshare(0x400003ea) 11:09:28 executing program 0: unshare(0x400001d2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:28 executing program 1: unshare(0x4000030e) 11:09:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6}, 0x5) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x38209e0f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffd}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:28 executing program 3: unshare(0x400003fe) 11:09:28 executing program 5: unshare(0x4000030e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:28 executing program 2: unshare(0x400003ec) 11:09:28 executing program 1: unshare(0x40000312) 11:09:28 executing program 3: unshare(0x40000402) 11:09:28 executing program 2: unshare(0x400003ee) [ 639.467873][ T5971] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 639.507544][ T5979] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:28 executing program 0: unshare(0x400001d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000a419ebc1f9faf277f3321df55f000406010200008000"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:29 executing program 1: unshare(0x40000314) 11:09:29 executing program 5: unshare(0x40000312) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:29 executing program 3: unshare(0x40000500) 11:09:29 executing program 2: unshare(0x400003f2) [ 639.859448][ T28] audit: type=1804 audit(1592564969.169:344): pid=5995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/489/cgroup.controllers" dev="sda1" ino=16359 res=1 11:09:29 executing program 1: unshare(0x40000316) 11:09:29 executing program 3: unshare(0x40000600) 11:09:29 executing program 2: unshare(0x400003f4) 11:09:29 executing program 0: unshare(0x400001e2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:29 executing program 1: unshare(0x40000318) 11:09:29 executing program 5: unshare(0x40000314) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:29 executing program 2: unshare(0x400003f8) [ 640.175277][ T6022] IPVS: ftp: loaded support on port[0] = 21 11:09:29 executing program 1: unshare(0x4000031a) 11:09:29 executing program 0: unshare(0x400001e4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:29 executing program 2: unshare(0x400003fa) 11:09:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f0000000300)={r3}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x400}, 0x8) close(r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x81000) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:29 executing program 5: unshare(0x4000032a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:29 executing program 1: unshare(0x4000031c) [ 640.594200][ T6022] IPVS: ftp: loaded support on port[0] = 21 11:09:30 executing program 3: unshare(0x40000601) 11:09:30 executing program 2: unshare(0x400003fc) 11:09:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0xfffffff9) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:30 executing program 0: unshare(0x400001ec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:30 executing program 1: unshare(0x40000322) 11:09:30 executing program 5: unshare(0x40000332) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:30 executing program 1: unshare(0x40000324) 11:09:30 executing program 2: unshare(0x400003fe) [ 641.108984][ T6118] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 641.160501][ T28] audit: type=1804 audit(1592564970.469:345): pid=6118 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/491/cgroup.controllers" dev="sda1" ino=16381 res=1 11:09:30 executing program 3: unshare(0x40000700) [ 641.211282][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:30 executing program 0: unshare(0x400001f2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:30 executing program 5: unshare(0x40000334) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:30 executing program 1: unshare(0x4000032a) 11:09:30 executing program 2: unshare(0x40000402) 11:09:30 executing program 3: unshare(0x40000802) 11:09:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000804060102000080037600000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=""/30, &(0x7f0000000100)=0x1e) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:31 executing program 1: unshare(0x4000032e) 11:09:31 executing program 3: unshare(0x40000a00) 11:09:31 executing program 2: unshare(0x40000500) 11:09:31 executing program 5: unshare(0x4000033c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:31 executing program 0: unshare(0x400001f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:31 executing program 3: unshare(0x40000a03) 11:09:31 executing program 1: unshare(0x40000332) 11:09:31 executing program 2: unshare(0x40000600) 11:09:31 executing program 5: unshare(0x4000033f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 642.069667][ T28] audit: type=1804 audit(1592564971.379:346): pid=6184 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/492/cgroup.controllers" dev="sda1" ino=16360 res=1 11:09:31 executing program 1: unshare(0x40000334) 11:09:31 executing program 3: unshare(0x40000c00) [ 642.234076][ T6201] IPVS: ftp: loaded support on port[0] = 21 11:09:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000406010200208000000000001079ddd8020851d700"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:31 executing program 1: unshare(0x40000336) 11:09:31 executing program 0: unshare(0x400001fc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:31 executing program 3: unshare(0x40000c02) 11:09:31 executing program 5: unshare(0x40000340) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 642.579292][ T6201] IPVS: ftp: loaded support on port[0] = 21 11:09:31 executing program 1: unshare(0x4000033a) 11:09:32 executing program 3: unshare(0x40000c03) 11:09:32 executing program 0: unshare(0x40000201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 642.792353][ T28] audit: type=1804 audit(1592564972.099:347): pid=6252 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/493/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 642.830416][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:32 executing program 2: unshare(0x40000601) 11:09:32 executing program 5: unshare(0x40000352) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:32 executing program 3: unshare(0x40000e03) 11:09:32 executing program 1: unshare(0x4000033c) 11:09:32 executing program 1: unshare(0x4000033f) 11:09:32 executing program 0: unshare(0x40000204) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x803, 0x8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x7}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000200)="62be6ea981a81f0ba4a41727b7103e639535e406ab82ecaa009ba7baade185a15acc0fa0ee0c0c7ec0b01dd4773ed63140652ff5e0891f562a46b0e2ee91111eab92027575cc84ee59e959e21c7bd319e46df3914161d166e03eb8b675d413f703701141ba5534e930b3bc4e965f09492be622625d0f2c279467df46c015607d4eeb55ee25b63038600dc67e74b2ba8524a4c0c5015075a2788bb6a15914dcdac1adbb7db8d7e9acf777d3884e50c7863d3223534859383957563540d1761394157bc0c34d8783048a", 0xc9, 0x4000, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x80, 0x6, @multicast}, 0x14) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000003acab99e8623a45a7e7d464b29188c1b3b5c5d2b6acf98097305b2ffc8f77b3a5a22bca25f1831331264abf7b2acc4801c956f69874ddd7dab193b3e5b92da8edb7778716a5492f3b3303e882e890ec2ddc74ee97ea94372f6af7bdd9a86d8c2e9b95a7b0fef4784bc637", @ANYRES16=r4, @ANYBLOB="000126bd7000fcdbdf25020000000800020081000000050005000300000008000300737b00001400010000000000000000000000000000000000080002000100000008000400ba000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000300)={'batadv0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100002a00) 11:09:32 executing program 3: unshare(0x40001100) 11:09:32 executing program 2: unshare(0x40000700) 11:09:32 executing program 5: unshare(0x40000358) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:32 executing program 1: unshare(0x40000340) 11:09:32 executing program 3: unshare(0x40001200) 11:09:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007", @ANYRES64, @ANYRES16=r2], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r3, 0x0, 0x100002a00) 11:09:32 executing program 2: unshare(0x40000802) 11:09:32 executing program 0: unshare(0x40000208) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:33 executing program 5: unshare(0x4000035a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:33 executing program 1: unshare(0x40000342) 11:09:33 executing program 3: unshare(0x40001201) 11:09:33 executing program 2: unshare(0x40000a00) [ 643.808724][ T6345] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 643.878202][ T6345] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:33 executing program 1: unshare(0x40000344) 11:09:33 executing program 3: unshare(0x40001203) 11:09:33 executing program 2: unshare(0x40000a03) 11:09:33 executing program 0: unshare(0x4000020c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:33 executing program 5: unshare(0x4000035c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 644.565309][ T6392] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 644.586637][ T6391] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 644.651544][ T28] audit: type=1804 audit(1592564973.959:348): pid=6345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/495/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 644.690546][ T28] audit: type=1804 audit(1592564973.959:349): pid=6352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/495/cgroup.controllers" dev="sda1" ino=16370 res=1 11:09:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060110000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x40, 0x1, 0xf7, 0xf9}, 0x6) sendfile(r2, r1, 0x0, 0x100002a00) [ 644.792890][ T28] audit: type=1804 audit(1592564974.099:350): pid=6391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/495/cgroup.controllers" dev="sda1" ino=16370 res=1 11:09:34 executing program 2: unshare(0x40000c00) 11:09:34 executing program 1: unshare(0x40000348) 11:09:34 executing program 3: unshare(0x40001400) 11:09:34 executing program 0: unshare(0x4000021c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:34 executing program 5: unshare(0x4000035e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:34 executing program 3: unshare(0x40001401) 11:09:34 executing program 1: unshare(0x4000034a) 11:09:34 executing program 2: unshare(0x40000c02) 11:09:34 executing program 0: unshare(0x4000021e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 645.101941][ T28] audit: type=1804 audit(1592564974.409:351): pid=6412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/496/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 645.129396][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:34 executing program 5: unshare(0x40000360) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:34 executing program 3: unshare(0x40001600) 11:09:34 executing program 2: unshare(0x40000c03) 11:09:34 executing program 1: unshare(0x4000034c) 11:09:34 executing program 3: unshare(0x40001800) 11:09:34 executing program 0: unshare(0x40000224) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x11085040}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000002780)=0x80000000, 0x4) mmap(&(0x7f0000816000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0x20000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004040001000700"/25], 0x1}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000000180)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000002680)=[{&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/197, 0xc5}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000100)}], 0x9}, 0x2120) sendfile(r7, r6, 0x0, 0x100002a00) 11:09:34 executing program 5: unshare(0x40000362) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:35 executing program 1: unshare(0x40000350) 11:09:35 executing program 3: unshare(0x40001a03) 11:09:35 executing program 2: unshare(0x40000e00) 11:09:35 executing program 5: unshare(0x40000364) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:35 executing program 0: unshare(0x4000022a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:35 executing program 3: unshare(0x40001c00) [ 645.978163][ T6480] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:35 executing program 1: unshare(0x40000352) 11:09:35 executing program 2: unshare(0x40000e03) 11:09:35 executing program 3: unshare(0x40001c03) 11:09:35 executing program 2: unshare(0x40001003) [ 646.560260][ T28] audit: type=1804 audit(1592564975.870:352): pid=6482 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/497/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 646.658922][ T6512] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 646.704547][ T28] audit: type=1804 audit(1592564976.020:353): pid=6514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/497/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 646.781575][ T28] audit: type=1800 audit(1592564976.060:354): pid=6465 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16368 res=0 [ 646.853750][ T28] audit: type=1800 audit(1592564976.060:355): pid=6514 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16368 res=0 11:09:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0xfffffffffffffee1, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:37 executing program 5: unshare(0x4000036c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:37 executing program 1: unshare(0x40000356) 11:09:37 executing program 0: unshare(0x40000232) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:37 executing program 3: unshare(0x40001f00) 11:09:37 executing program 2: unshare(0x40001100) 11:09:37 executing program 3: unshare(0x40002000) 11:09:37 executing program 2: unshare(0x40001200) 11:09:37 executing program 1: unshare(0x40000358) [ 648.402305][ T28] audit: type=1804 audit(1592564977.710:356): pid=6535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/498/cgroup.controllers" dev="sda1" ino=16369 res=1 11:09:37 executing program 0: unshare(0x4000023a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:37 executing program 5: unshare(0x40000382) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:37 executing program 3: unshare(0x40002400) 11:09:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100002a00) 11:09:38 executing program 5: unshare(0x40000384) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:38 executing program 2: unshare(0x40001201) 11:09:38 executing program 1: unshare(0x4000035a) 11:09:38 executing program 0: unshare(0x4000023c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:38 executing program 3: unshare(0x40002402) 11:09:38 executing program 2: unshare(0x40001203) 11:09:38 executing program 1: unshare(0x4000035c) 11:09:38 executing program 3: unshare(0x40002403) 11:09:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4f) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f0000000300)={r6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r6, 0x122c}, &(0x7f0000000100)=0x8) r7 = socket(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x1}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100002a00) 11:09:38 executing program 0: unshare(0x4000023e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:38 executing program 2: unshare(0x40001400) 11:09:38 executing program 1: unshare(0x4000035e) 11:09:38 executing program 5: unshare(0x4000038a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:38 executing program 3: unshare(0x40002803) [ 649.357446][ T6610] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 649.381044][ T6610] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:38 executing program 2: unshare(0x40001401) 11:09:38 executing program 1: unshare(0x40000360) 11:09:38 executing program 0: unshare(0x40000242) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 649.544132][ T28] audit: type=1804 audit(1592564978.860:357): pid=6632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/500/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 649.573664][ T6632] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 11:09:38 executing program 3: unshare(0x40002a00) 11:09:39 executing program 2: unshare(0x40001403) [ 649.636490][ T6632] File: /root/syzkaller-testdir223159975/syzkaller.jm6GAW/500/cgroup.controllers PID: 6632 Comm: syz-executor.4 11:09:39 executing program 1: unshare(0x40000362) 11:09:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x44, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x2}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfffffffa}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000805) 11:09:39 executing program 3: unshare(0x40002a02) 11:09:39 executing program 5: unshare(0x4000038e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:39 executing program 0: unshare(0x4000024c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:39 executing program 2: unshare(0x40001600) 11:09:39 executing program 1: unshare(0x40000364) 11:09:39 executing program 1: unshare(0x4000036a) 11:09:39 executing program 3: unshare(0x40002a03) 11:09:39 executing program 2: unshare(0x40001800) 11:09:39 executing program 5: unshare(0x40000390) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:39 executing program 0: unshare(0x40000254) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 650.359889][ T28] audit: type=1804 audit(1592564979.670:358): pid=6678 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/501/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 650.392411][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:39 executing program 2: unshare(0x40001a03) 11:09:40 executing program 3: unshare(0x40003002) 11:09:40 executing program 1: unshare(0x4000036c) 11:09:40 executing program 2: unshare(0x40001c00) 11:09:40 executing program 5: unshare(0x40000394) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:40 executing program 0: unshare(0x4000025c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private=0xa010101, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r4, r5}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x0, 0x0, 0x5}, 0x7, 0x6e6bb1, 0x0, 0x1}, {{@in=@dev}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e24, 0x1f, 0x0, 0x80, 0x0, 0xff, 0x0, r5}, {0xffffffff, 0xfff, 0x6, 0x40, 0x913, 0x100000001, 0x2, 0x4}, {0xffffffffffffff01, 0xfffffffffffffffa, 0x0, 0x20000000000}, 0x0, 0x6e6bb4, 0x2, 0x1, 0x3, 0x3}, {{@in6=@private1, 0x4d5}, 0x0, @in=@multicast2, 0x3500, 0x0, 0x0, 0x8c, 0x6, 0x44}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41c008}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ac1414aa000000000000000000000000000004d500000000ff0100000000000000000000000000010100010000000002080000000000000056f33f5500000000f3fcffffffffffffff0f000000000000080000000000000007000000000000003e00000000000000ffff000000000000b8f70000000000001200000000000000ff7f00000000000000000000800000000104000027bd700005350000020000083400000000000000080016000000000008001e000300000008000b00000000c0a085b5c32134a306a17921be1b1a46825f6227bddc4da05272587333557cafd63b88d88ad606ef772f1254ccaa2cfb9a12"], 0x1ec}, 0x1, 0x0, 0x0, 0x24004001}, 0x4) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r5) 11:09:40 executing program 2: unshare(0x40001c03) 11:09:40 executing program 1: unshare(0x4000036e) 11:09:40 executing program 3: unshare(0x40003201) 11:09:40 executing program 0: unshare(0x4000025e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:40 executing program 3: unshare(0x40003203) [ 651.184074][ T28] audit: type=1804 audit(1592564980.500:359): pid=6740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/502/cgroup.controllers" dev="sda1" ino=16381 res=1 11:09:40 executing program 5: unshare(0x40000396) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:40 executing program 2: unshare(0x40001f00) 11:09:40 executing program 1: unshare(0x40000370) 11:09:40 executing program 3: unshare(0x40003400) 11:09:40 executing program 1: unshare(0x40000374) 11:09:40 executing program 2: unshare(0x40002000) 11:09:41 executing program 5: unshare(0x40000398) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:41 executing program 0: unshare(0x40000260) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:41 executing program 3: unshare(0x40003403) 11:09:41 executing program 2: unshare(0x40002400) 11:09:41 executing program 1: unshare(0x4000037c) 11:09:41 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000ac0)='memory.swap.current\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa0, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048000) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r2, r7, 0x0, 0x20100002a00) 11:09:41 executing program 1: unshare(0x40000382) 11:09:41 executing program 3: unshare(0x40003600) 11:09:41 executing program 2: unshare(0x40002402) 11:09:41 executing program 0: unshare(0x40000262) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 652.229724][ T6806] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:41 executing program 1: unshare(0x40000384) 11:09:41 executing program 3: unshare(0x40003603) [ 652.275845][ T6829] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:41 executing program 5: unshare(0x400003a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:41 executing program 2: unshare(0x40002403) [ 652.322540][ T28] audit: type=1804 audit(1592564981.630:360): pid=6829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/503/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 652.398747][ T28] audit: type=1804 audit(1592564981.670:361): pid=6829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/503/cgroup.controllers" dev="sda1" ino=16368 res=1 11:09:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, 0x2, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null]}) 11:09:41 executing program 1: unshare(0x4000038a) 11:09:41 executing program 3: unshare(0x40003800) 11:09:42 executing program 0: unshare(0x40000270) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:42 executing program 2: unshare(0x40002a00) 11:09:42 executing program 5: unshare(0x400003a4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 652.695081][ T28] audit: type=1804 audit(1592564982.010:362): pid=6856 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/504/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 652.731143][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.767952][ T6866] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:42 executing program 1: unshare(0x4000038c) 11:09:42 executing program 3: unshare(0x40003a00) 11:09:42 executing program 2: unshare(0x40002a02) 11:09:42 executing program 1: unshare(0x4000038e) 11:09:42 executing program 3: unshare(0x40003a01) 11:09:42 executing program 0: unshare(0x40000272) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000040)={0x8, 'wg1\x00', {'syzkaller1\x00'}, 0x9}) 11:09:42 executing program 2: unshare(0x40002a03) 11:09:42 executing program 5: unshare(0x400003a8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:42 executing program 1: unshare(0x40000390) 11:09:42 executing program 3: unshare(0x40003a02) 11:09:42 executing program 0: unshare(0x40000274) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:42 executing program 3: unshare(0x40003a03) 11:09:42 executing program 2: unshare(0x40002c01) 11:09:42 executing program 1: unshare(0x40000392) [ 653.445701][ T28] audit: type=1804 audit(1592564982.760:363): pid=6918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/505/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 653.477436][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 653.518405][ T6920] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:42 executing program 3: unshare(0x40003c01) 11:09:42 executing program 5: unshare(0x400003aa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:43 executing program 2: unshare(0x40002e00) 11:09:43 executing program 1: unshare(0x40000394) 11:09:43 executing program 0: unshare(0x4000027a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:43 executing program 3: unshare(0x40003c02) 11:09:43 executing program 2: unshare(0x40003201) 11:09:43 executing program 1: unshare(0x40000398) 11:09:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x3, @local, 0x40000}, 0x53) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r1, r2}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x0, 0x0, 0x5}, 0x7, 0x6e6bb1, 0x0, 0x1}, {{@in=@dev}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e24, 0x1f, 0x0, 0x80, 0x0, 0xff, 0x0, r2}, {0xffffffff, 0xfff, 0x6, 0x40, 0x913, 0x100000001, 0x2, 0x4}, {0xffffffffffffff01, 0xfffffffffffffffa, 0x0, 0x20000000000}, 0x0, 0x806e6bb4, 0x2, 0x1, 0x3, 0x3}, {{@in6=@private1, 0x4d5}, 0x0, @in=@multicast2, 0x3500, 0x0, 0x0, 0x8c, 0x6, 0x44}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41c008}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec010000120001002abd7000ffdbdf2500000000000000000000000000000000000004d502006c00c7001400736d330000000000000000000000000000000000000000000000000016000000000000004e000000000000000000000000d80300000002000075845be665c5688f244a81802e1c8066ad5c6238ff9f7a275b759f2d72e0635b463d9367db364a801dbb44f8892327ef3389ea0c7d4328320716bcf4ee042e0d93d453876baef6417aa22a063e3f5339f998a1179edae70ec77b30f988c8fa095b43291ac9335713bb3a6e13efe9e1848b3e70a312fab20eacf5ce00e4000600ac1e010100000000000000000000400000000000000000000000ffffe00000014e2100084e207c5e0100a020730000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ac1414aa000000000000000000000000000004d500000000ff0100000000000000000000000000010100010000000002080000000000000056f33f5500000000f3fcffffffffffffff0f000000000000080000000000000007000000000000003e00000000000000ffff000000000000b8f70000000000001200000000000000ff7f00000000000000000000800000000104000027bd700005350000020000083400000000000000080016000000000008001e000300000008000b00000000c0a085b5c32134a306a17921be1b1a46825f6227bddc4da05272587333557cafd63b88d88ad606ef772f1254ccaa2cfb9a12"], 0x1ec}, 0x1, 0x0, 0x0, 0x24004001}, 0x4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @remote}, @in=@broadcast, 0x4e22, 0x7, 0x4e21, 0x1, 0x2, 0xa0, 0x60, 0x1d, 0x0, r2}, {0x5, 0xfffffffffffffff9, 0x5, 0x81, 0x100000000, 0x9, 0x9, 0x80000001}, {0x9, 0x589a, 0x0, 0x3f}, 0x4, 0x6e6bbb, 0x2, 0x0, 0x2, 0x3}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d4, 0x33}, 0xa, @in6=@mcast1, 0x3501, 0x1, 0x3, 0x9, 0x5, 0x10000000, 0x8}}, 0xe8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000040)={'wg2\x00', 0x5}) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:43 executing program 5: unshare(0x400003ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 654.152946][ T28] audit: type=1804 audit(1592564983.470:364): pid=6962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/506/cgroup.controllers" dev="sda1" ino=16228 res=1 [ 654.192312][ T6962] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 654.237184][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:43 executing program 1: unshare(0x4000039a) 11:09:43 executing program 0: unshare(0x4000027c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:43 executing program 3: unshare(0x40003c03) 11:09:43 executing program 2: unshare(0x40003203) 11:09:43 executing program 1: unshare(0x4000039c) 11:09:43 executing program 5: unshare(0x400003b2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:44 executing program 3: unshare(0x40003e02) 11:09:44 executing program 2: unshare(0x40003400) 11:09:44 executing program 0: unshare(0x4000028c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:44 executing program 1: unshare(0x400003a0) [ 654.841963][ T28] audit: type=1804 audit(1592564984.150:365): pid=6963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/506/cgroup.controllers" dev="sda1" ino=16228 res=1 11:09:44 executing program 3: unshare(0x40003f00) 11:09:44 executing program 1: unshare(0x400003a2) 11:09:44 executing program 2: unshare(0x40003403) 11:09:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x24, 0xc59, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)="05184f8d1d90c9b6ae3d51d70d8888c25cce5ca1f1bbaf64f7a74185d288201b72603a1603", &(0x7f00000000c0), 0x1081, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3, r1}, 0x38) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:44 executing program 0: unshare(0x40000294) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:44 executing program 5: unshare(0x400003b6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:44 executing program 2: unshare(0x40003600) 11:09:44 executing program 3: unshare(0x40004000) 11:09:44 executing program 1: unshare(0x400003a4) 11:09:44 executing program 3: unshare(0x40004203) [ 655.326937][ T28] audit: type=1804 audit(1592564984.640:366): pid=7042 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/507/cgroup.controllers" dev="sda1" ino=16181 res=1 [ 655.335127][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:44 executing program 1: unshare(0x400003a8) 11:09:44 executing program 2: unshare(0x40003603) 11:09:44 executing program 0: unshare(0x4000029a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:44 executing program 5: unshare(0x400003ba) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:45 executing program 3: unshare(0x40004401) 11:09:45 executing program 2: unshare(0x40003800) 11:09:45 executing program 1: unshare(0x400003ac) 11:09:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0x9, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:45 executing program 0: unshare(0x400002ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:45 executing program 3: unshare(0x40004403) 11:09:45 executing program 2: unshare(0x40003a00) 11:09:45 executing program 1: unshare(0x400003b0) 11:09:45 executing program 5: unshare(0x400003bc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:45 executing program 3: unshare(0x40004600) 11:09:45 executing program 1: unshare(0x400003b2) 11:09:45 executing program 2: unshare(0x40003a01) 11:09:45 executing program 0: unshare(0x400002b2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:45 executing program 4: r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') r2 = socket$inet_mptcp(0x2, 0x1, 0x106) splice(r1, &(0x7f0000000100)=0x5, r2, &(0x7f0000000180)=0x2, 0x1000, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f00008c8000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:09:45 executing program 3: unshare(0x40004800) 11:09:45 executing program 5: unshare(0x400003c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:45 executing program 1: unshare(0x400003b4) 11:09:45 executing program 2: unshare(0x40003a02) 11:09:45 executing program 3: unshare(0x40004802) 11:09:45 executing program 2: unshare(0x40003a03) 11:09:46 executing program 0: unshare(0x400002c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:46 executing program 1: unshare(0x400003ba) 11:09:46 executing program 5: unshare(0x400003c8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:46 executing program 3: unshare(0x40004a00) 11:09:46 executing program 2: unshare(0x40003c01) [ 657.170535][ T28] audit: type=1804 audit(1592564986.480:367): pid=7147 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/509/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 657.228075][ T28] audit: type=1804 audit(1592564986.510:368): pid=7155 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/509/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 657.290464][ T28] audit: type=1800 audit(1592564986.580:369): pid=7147 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16370 res=0 [ 657.347711][ T28] audit: type=1800 audit(1592564986.580:370): pid=7155 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16370 res=0 11:09:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100b100dd310000040601b3ec00a9e0ffffff0010000b00050001000776a2a67f3760ee3d"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:46 executing program 1: unshare(0x400003bc) 11:09:46 executing program 2: unshare(0x40003c02) 11:09:46 executing program 3: unshare(0x40004a02) 11:09:46 executing program 0: unshare(0x400002cc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:46 executing program 5: unshare(0x400003ca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:46 executing program 3: unshare(0x40004c00) 11:09:46 executing program 2: unshare(0x40003c03) 11:09:46 executing program 1: unshare(0x400003c2) [ 657.696549][ T28] audit: type=1804 audit(1592564987.010:371): pid=7208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/510/cgroup.controllers" dev="sda1" ino=15733 res=1 11:09:47 executing program 3: unshare(0x40004c01) 11:09:47 executing program 5: unshare(0x400003cc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:47 executing program 0: unshare(0x400002d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000040)="72388c4b3e139d59f4824275f19282385e1a", 0x12}, {&(0x7f0000000100)="7a362dec54453c74be0eaf34db0d46", 0xf}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="d91562f5d76a43cbd43be637ed22e6b68b7faefdedd03fec707d9ee7024d4f43ae3b6b39a3f345d0d54135a2323c9a66c5c00b8df250c635f47bfab00e1a8105c414839d42fe1f0102e9e280db15a545ac7a5c5437d066d477b6dc5363f255591cc8b6c297b8c4242c276ce7c6f72211985e8779976948c9575a318d517b60d0218b62e2f5313309269e0856c91e9688faaec63e130af7", 0x97}, {&(0x7f00000012c0)="0d2457d296ef32eef952db59fe94bb006043c3c0006f3a45e82c3b488fb689bf6af63d2813fe97173f27766ce1915007aa78efe185137ec11b9ae48abfe89d06877a969ae5da65f71720e27e97101596ca11d6f3ae7de1417f7398654cfb981df66a832bce1358c5c1c7cb44c9ed0183d5c905b1a0c1f65edf286c59d0fdf53387c7e75b2eac6a4d281649e4af409f1e52169149b1a4f9260a67054ccaf1ed6d8c5846aa6efe96cd749fe8136a", 0xad}, {&(0x7f0000000180)="0616715fc739acf152ba02bca8ff1b91bbd2bfb52ce74106ec67f0", 0x1b}, {&(0x7f0000001380)="44c32b75e8ba284a857a7e2683cbea4786ad6dafa9a98b5926b973bf396edffa97e0791ab8a4f00230", 0x29}, {&(0x7f00000013c0)="9ea9f2748be125aa8afb0a2f28aa8f10078cad4cee0370aeb25f9103bc8d298ce8e25db25ebf0aa6b6361ec0cd5ee8bf39705adc72b13f637fd0614a73319a2cb7aa24f178e71a5c7b6b0ff4ec43865349807497e584dad0404fa446fb7d", 0x5e}, {&(0x7f0000001440)="cf96b9aec5535c45428f029eea35279a99986bce6b9ef0db6b2b5c8e967a6c2ee0d104b8819d1b686002e440bfba5f40cb2d97d018156197ef239371cf3f911dd809b308545393360b8b7a87a666628802dd9de606018ba14b6b319fdbb61611aec3820680294d7101f6a04e0fe62a2545877d3a01c8a8f5a66cb767ef03da373075d0a7e3aa2dc238fdd786f0b3221ac89cbf88bb50a0eb440f511a3247660f00", 0xa1}], 0x9, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$nl_generic(r2, &(0x7f0000002900)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000028c0)={&(0x7f0000001600)={0x1284, 0x19, 0x100, 0x70bd25, 0x25dfdbff, {0x20}, [@generic="103bee688614e224d24d4df06104489182f7e150d7813fbee2f817ff02db8b9e10d9ddfe564a0d066c0d0d7503e1a27ddca0fe58b56079ff409b9923bb5b5bb551cddd44d1e519d8db0950940c0e0facb2a0816529c8fd1a4c9cafd20073fe5ec5c66326301b57aff69e3241dbdfd184c0c731", @generic="406e98d3de24a92ec7ce0607e50fc755bc9acf8fb24cebd160265ba9b9cf04c96e227455116826124e4a77dd4c0f76c2e8c0c66b59b9d9cebef7", @generic="6f6b8b2f8019ba380ae339b818cdc4c2984467bb8065d177612382fdebd532cf739209abdc935df905b2e8e22ab2e7f38b51389eb102e5ca1f7fc713f2e111dda9e3d581e390f4b13e9e2d8328bf260358f43af006a68bb7dfde7a1b7f598d617f379a6a1a2fdad3651f3586d3d5369aed", @generic="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", @generic="546fdd9a2836c55c6a4a76b94dbde7771b52793f349d526f33d4640cd34668a25e6f0edb2a973b5a52f5d65afa87f497ee7de693cef2f4e9ace0c738f9c16f8c3de780cb609d14e98ee7f10e31fbc0d913084fed27", @generic="1a99ffc17388cb145647100e3871810f0f962da062438e10754bb4e16e3ba5fc5db3864e2dabb2ee5ed0a3cd7c1ee940f5c6e98895037b3a3088d6f3345301212aa26127411e93d2bd7556b02a31467046dc9aa4497b3d88", @generic="aba67b7035ecf617af59e0094a881bb71e8fec3ce2568b65fc9a5c77e5b6b0c9bc8f4dcf8743d636ddda77784112bf40aa63b8ef2eb33ec94ad010d0192eb5f469cc96f769fff88b2cc7a8057e538ce3ae4c07b10a67ced0114adf93ee765b7accc217e2ed51307c5ad563b6d6be89b572aa196f948834fd70db2fe86be31b22724adf205141819be0cc6258da496fd8663e4ace37633adc361cc9c4c5", @typed={0x8, 0x8d, 0x0, 0x0, @u32=0x6}]}, 0x1284}, 0x1, 0x0, 0x0, 0x84}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100002a00) 11:09:47 executing program 2: unshare(0x40003e02) 11:09:47 executing program 1: unshare(0x400003c8) 11:09:47 executing program 3: unshare(0x40005002) 11:09:47 executing program 0: unshare(0x400002da) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:47 executing program 2: unshare(0x40003f00) 11:09:47 executing program 5: unshare(0x400003d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:47 executing program 1: unshare(0x400003ca) [ 658.150776][ T28] audit: type=1804 audit(1592564987.460:372): pid=7255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/511/cgroup.controllers" dev="sda1" ino=16082 res=1 [ 658.184689][ T7253] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:47 executing program 3: unshare(0x40005200) 11:09:47 executing program 2: unshare(0x40004000) 11:09:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) accept4$inet6(r2, 0x0, &(0x7f0000000100), 0x81000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100002a00) accept4$alg(r0, 0x0, 0x0, 0x800) 11:09:47 executing program 1: unshare(0x400003cc) 11:09:47 executing program 3: unshare(0x40005201) 11:09:47 executing program 0: unshare(0x400002dc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:47 executing program 2: unshare(0x40004203) 11:09:47 executing program 5: unshare(0x400003d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:47 executing program 1: unshare(0x400003d0) 11:09:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000040)=0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:47 executing program 3: unshare(0x40005402) 11:09:47 executing program 2: unshare(0x40004401) 11:09:48 executing program 1: unshare(0x400003d2) 11:09:48 executing program 0: unshare(0x400002de) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:48 executing program 3: unshare(0x40005602) [ 658.850595][ T28] audit: type=1804 audit(1592564988.161:373): pid=7317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/513/cgroup.controllers" dev="sda1" ino=16225 res=1 11:09:48 executing program 5: unshare(0x400003d6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:48 executing program 2: unshare(0x40004403) [ 658.896844][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:48 executing program 3: unshare(0x40005603) 11:09:48 executing program 1: unshare(0x400003d4) 11:09:48 executing program 2: unshare(0x40004600) 11:09:48 executing program 3: unshare(0x40005703) 11:09:48 executing program 0: unshare(0x400002ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:48 executing program 5: unshare(0x400003da) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:48 executing program 1: unshare(0x400003d6) 11:09:48 executing program 3: unshare(0x40005803) 11:09:48 executing program 2: unshare(0x40004800) 11:09:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060102000080080200000010000b000500014e6a96ef0762333ca9dd8cb932e3420d1d8486b63f42accbadac232f63e45027ef00c8270000000000000000b14ea0a6e814230f4e2843b43d36b941a7fe9120fc7e666e1d125787c6f376b913381618f99763f0becec50af50265c13c7453246ad23d87281f26f5ced7e552579f79d165dc8fdb898b01c7286de606074f83f3b6c8ac3096c0"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r3) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)) accept4$inet6(r3, 0x0, &(0x7f0000000100), 0x81000) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0xfb, 0x3}) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:48 executing program 3: unshare(0x40005a00) 11:09:48 executing program 2: unshare(0x40004802) 11:09:48 executing program 5: unshare(0x400003dc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:48 executing program 1: unshare(0x400003d8) [ 659.608687][ T28] audit: type=1804 audit(1592564988.921:374): pid=7372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/514/cgroup.controllers" dev="sda1" ino=15890 res=1 11:09:49 executing program 0: unshare(0x400002ec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:49 executing program 1: unshare(0x400003da) 11:09:49 executing program 3: unshare(0x40005a01) 11:09:49 executing program 2: unshare(0x40004a00) 11:09:49 executing program 1: unshare(0x400003dc) 11:09:49 executing program 5: unshare(0x400003e4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:49 executing program 3: unshare(0x40005a03) 11:09:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$inet(r2, &(0x7f0000001780)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="eced16f49a7a87149881671837342c2926f3fe90e7eb0aa3f4f0a6d2f19af6a2be0e2506c3fbb718bbcab365f69d94c42041b507079d02821b05320213c122612fb04d015709633b00d5a9a65f4557050324958199df6cd7bb822b745b662a156727c958e6a78d4e", 0x68}, {&(0x7f0000000100)="dfb5ee51ce3916e78577cc1e20c9efde861daf660edfb1b320d3cb018b25964affb7f19db990b29eac75b29f3f40e21ce12976fa98830b97419f91ab", 0x3c}, {&(0x7f0000001280)="e815da735b9fdc50c930d5e6cc3f3395eb1146934c0e91f16482a3dcc8cfcbe7307f97a8778452907b94b173f8531d27890f8ec4964ccf4bc27e37aeff566993b461640c0278359e6b4127b353e868a55718ca9cccdd9ec3c0fe8e9f2f1c59378b7b38183e65125eb9cbf8aed51179858f4e9915a5a2d895c1fc84f0694e688f149042f708e875557a960da90bc976854aa8f4e863c8ccfb52f139aa5243dceb3f9eb5c829ac4d8f27e4ded0920757", 0xaf}, {&(0x7f0000001340)="5ff5ad0fd3c74fb8bec6434003f5b67127bcf8ebff93dc4d0ce21ddd1401f28949cfe61be4dd9342b58f00462160ce27171ddf60b4b46ffc80e4dd1f14a192000c034a9dd7c4eff1673c61ab101831083ce28da288e7e1fbd5658601263c5d9fdb29cd1443efc66aa2f9fcbd21ce200bc0af1fd8ef7025b534e9611df705d46e9bc218c3feb6422636e64e5ef0c81a84b0ee76b474bde1a5c1eb0ba4e3fe1243afebcac8751352dbbfc38edba6d118", 0xaf}, {&(0x7f0000001400)="1713dd5ffb2ea75496b57d9e3b5d5b9cdf55c7e91247a3fcd8ff86a56a5faa683911038c63916bc2e69ac0fb56c664ecd2891b8fabe5418bc45094db85d31c4e44d728f2743d2c3a07ac03f8864f723b31159a6484c15e65e42b89bef9ade38b1ed403d25837a4c96a3731a9c8a70b1d5fb7f925999f49c4fad9a7c867e926de93065d99e59adfb8121b4b5362e2e93a7e0e1001b5c606e320ddf4bd48f24664094ec16d4588d0d3141c2e3c8c8d6e67f8f5ca5140c8a362b329bb621c138d2cf8072a2a753e37c11ac6adff553dbb26bdfe89a390f881367587b44205", 0xdd}, {&(0x7f0000000180)="7ca8759c63b7d8d6258e410da944fbaa87fabf0bfe80376d1f4a54cb14edb60a8ba7183f4428c28c02c27092e25e742beca90442e29f0b6f", 0x38}, {&(0x7f0000001500)="ad1dd306d32032e5427dc4bb9c50f5260fb5f82341b5085cc50b9a406b18502e755cbad36765072786d1d39995732cf6ecf34f6fe82be29be8f002dd5b5661e48e74bf67b1a04373542f7c7034765db0180d93c2892ef76ac4cedc280e17d3c745390b9e1305d50c73bba749558d705ef1715bd28aa65f02b08b1e4531fbee078bf218aa12e6cc9e37e5949698ea77be6a6da8e8f373dd161126044f14", 0x9d}, {&(0x7f00000015c0)="e4adb44a6752f889a69f4daac03fc82baeec", 0x12}, {&(0x7f0000001600)="48dce5be6d2ace37073c277c276c5b9a8671b2f89f11dd5e5589294643118faad5536d658dcaf43a8236a77215e627884d0fe1a107d3e5bd6e4587b26bef17831ece97dfa9e622bf4a2390909da20d9303db192af816896c8c1b68711cb9951e971ee92768b4ab09fa41bd419465e799f629c53e", 0x74}], 0xa, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010101}}}], 0x20}, 0x200440d1) sendfile(r2, r1, 0x0, 0x100002a00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000063c0)={&(0x7f0000006280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006380)={&(0x7f00000062c0)={0xa8, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MESH_ID={0x9, 0x18, "3c3f8c3008"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x56, 0x24, "9b6e3bd2a6e4115e849eae9f721a8c162a1f2ee9f4bd72d6958190b36bf8bf360235bdf8fda6d60dc931c3acee20ad17171b575b6179c17f8b37697218abf5275283ac754e841d1532b2007dd4dcfc7a648c"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 11:09:49 executing program 0: unshare(0x400002f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:49 executing program 2: unshare(0x40004a03) 11:09:49 executing program 1: unshare(0x400003de) 11:09:49 executing program 3: unshare(0x40005c00) [ 660.225539][ T28] audit: type=1804 audit(1592564989.541:375): pid=7416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/515/cgroup.controllers" dev="sda1" ino=15762 res=1 11:09:49 executing program 5: unshare(0x400003e6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:49 executing program 2: unshare(0x40004c00) [ 660.303974][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:49 executing program 1: unshare(0x400003e0) 11:09:49 executing program 3: unshare(0x40005c01) 11:09:49 executing program 0: unshare(0x400002f2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:49 executing program 2: unshare(0x40004c01) 11:09:49 executing program 1: unshare(0x400003e4) 11:09:50 executing program 5: unshare(0x400003ee) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:50 executing program 3: unshare(0x40005c03) 11:09:50 executing program 2: unshare(0x40004f02) 11:09:50 executing program 1: unshare(0x400003e6) 11:09:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'vlan1\x00', @local}) 11:09:50 executing program 0: unshare(0x400002fa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:50 executing program 2: unshare(0x40005102) 11:09:50 executing program 1: unshare(0x400003ea) 11:09:50 executing program 3: unshare(0x40005e03) [ 661.172819][ T7492] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:50 executing program 0: unshare(0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:50 executing program 3: unshare(0x40006000) 11:09:50 executing program 5: unshare(0x400003f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:50 executing program 1: unshare(0x400003ec) [ 661.217268][ T7501] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:50 executing program 2: unshare(0x40005200) 11:09:50 executing program 1: unshare(0x400003ee) [ 661.330435][ T28] audit: type=1804 audit(1592564990.641:376): pid=7501 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/516/cgroup.controllers" dev="sda1" ino=16321 res=1 [ 661.365455][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:09:50 executing program 3: unshare(0x40006002) 11:09:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x81000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) accept4$inet6(r2, 0x0, &(0x7f0000000100), 0x81000) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.events\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:09:51 executing program 0: unshare(0x40000308) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:51 executing program 2: unshare(0x40005201) 11:09:51 executing program 1: unshare(0x400003f0) 11:09:51 executing program 3: unshare(0x40006201) 11:09:51 executing program 5: unshare(0x400003f2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:51 executing program 2: unshare(0x40005402) 11:09:51 executing program 3: unshare(0x40006203) 11:09:51 executing program 1: unshare(0x400003f2) 11:09:51 executing program 0: unshare(0x4000030a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:51 executing program 5: unshare(0x400003f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:51 executing program 2: unshare(0x40005603) 11:09:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000e060102000080000002000010000be7daa030a6542d4d000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) sendfile(r9, r2, 0x0, 0x100002a00) 11:09:51 executing program 1: unshare(0x400003f4) 11:09:51 executing program 3: unshare(0x40006401) 11:09:51 executing program 2: unshare(0x40005703) 11:09:51 executing program 1: unshare(0x400003f6) 11:09:51 executing program 5: unshare(0x400003f6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 662.517083][ T7595] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:51 executing program 3: unshare(0x40006403) [ 662.604358][ T28] audit: type=1804 audit(1592564991.921:377): pid=7589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/518/cgroup.controllers" dev="sda1" ino=16384 res=1 11:09:51 executing program 0: unshare(0x4000030c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:52 executing program 2: unshare(0x40005803) 11:09:52 executing program 1: unshare(0x400003fa) 11:09:52 executing program 3: unshare(0x40006800) 11:09:52 executing program 2: unshare(0x40005a00) [ 663.196653][ T28] audit: type=1804 audit(1592564992.511:378): pid=7589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/518/cgroup.controllers" dev="sda1" ino=16384 res=1 11:09:52 executing program 3: unshare(0x40006803) 11:09:52 executing program 5: unshare(0x400003fa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:52 executing program 1: unshare(0x400003fc) 11:09:52 executing program 2: unshare(0x40005a01) 11:09:52 executing program 0: unshare(0x4000030e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @xdp={0x2c, 0xe, r6, 0x18}, @llc={0x1a, 0xfcf5, 0x5d, 0x8, 0x8, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='syzkaller1\x00', 0xffffffffbce1312e, 0x567a9bde, 0x4}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000802}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100002a00) 11:09:52 executing program 3: unshare(0x40006a03) 11:09:52 executing program 2: unshare(0x40005a03) 11:09:52 executing program 1: unshare(0x400003fe) [ 663.488038][ T7655] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:52 executing program 0: unshare(0x40000312) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:52 executing program 5: unshare(0x400003fc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:52 executing program 2: unshare(0x40005c00) 11:09:53 executing program 1: unshare(0x40000402) 11:09:53 executing program 3: unshare(0x40006c00) 11:09:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28004000040601cffeffff000000000010000b00050001000fd43e3653a84300e147011dc3519ed675f792e327ff815d664bc285b93bf024a7f48f3b9a823b5648cd1ee66e044f5b9a8aaa6a321d12d22e9853e6e6abd7e398ae45"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x30c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_PAYLOAD={0x57, 0xa, "0a5f2f03ac8b8fd129f97001f6cfa17d3b22d8038dc83b3a27bf0d3f83fd11e8baa5d0810e1d4dbb5192c1c3cf207beea1b802da5ddfd8af48aaf87b3de2e2839e1b3bc151a13a4680acf7a5e905a888184c85"}, @NFQA_PAYLOAD={0x85, 0xa, "95134e773719ffec141b21b9dee1187aea70ee77aed71ffbc75e084a46f3b6d1cf574efec14375c29c3a92a49a9e4e37ded4b8ac6a56f0a296a83a228d47b1fd41d963196c492c090290da2184dccc70770f3272cb407de40c029e65958386c08c097bc0e5d855c965965307b870d12d821828425a142543fc5dd5e9875f43c706"}, @NFQA_CT={0x19c, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x8001, 0x2, 0x3, 0x9, 0xd63, 0x3, 0x0, 0x9, 0xf3e8]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x87db}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}]}]}, @NFQA_CT={0x74, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x24}]}, 0x30c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x0, 0x5, 0xff, 0x6}]}) sendfile(r4, r1, &(0x7f0000000180)=0xbf, 0x9) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:53 executing program 1: unshare(0x40000500) 11:09:53 executing program 3: unshare(0x40006c01) 11:09:53 executing program 0: unshare(0x40000314) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:53 executing program 2: unshare(0x40005c02) 11:09:53 executing program 5: unshare(0x400003fe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:53 executing program 1: unshare(0x40000600) [ 664.079998][ T28] audit: type=1804 audit(1592564993.391:379): pid=7700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/520/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 664.123394][ T7700] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:53 executing program 3: unshare(0x40006c03) [ 664.170377][ T7700] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:53 executing program 0: unshare(0x4000031a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:53 executing program 2: unshare(0x40005c03) [ 664.310173][ T7721] IPVS: ftp: loaded support on port[0] = 21 11:09:53 executing program 3: unshare(0x40006e03) 11:09:53 executing program 5: unshare(0x40000402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100079256b70ed195d22a5e33f50558dbf4ab469ca40e12cf23dff81c1dcf36d97a953e8039cf308d79742dbe5c7e"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:09:54 executing program 2: unshare(0x40005e03) 11:09:54 executing program 3: unshare(0x40007200) 11:09:54 executing program 0: unshare(0x4000031c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:54 executing program 5: unshare(0x400004c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:54 executing program 2: unshare(0x40006000) [ 665.098809][ T28] audit: type=1804 audit(1592564994.411:380): pid=7765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/521/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 665.152342][ T7770] IPVS: ftp: loaded support on port[0] = 21 11:09:57 executing program 1: unshare(0x40000601) 11:09:57 executing program 3: unshare(0x40007202) 11:09:57 executing program 0: unshare(0x40000324) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:57 executing program 2: unshare(0x40006002) 11:09:57 executing program 5: unshare(0x40000500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000200)) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESOCT], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000006000500012707"], 0x1}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0x2, 0x3f, 0x100000001, 0x2, 0xfff, 0xff}) sendfile(r5, r4, 0x0, 0x100002a00) 11:09:57 executing program 3: unshare(0x40007400) 11:09:57 executing program 2: unshare(0x40006201) [ 668.567374][ T7790] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:09:58 executing program 0: unshare(0x4000032a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:58 executing program 1: unshare(0x40000700) 11:09:58 executing program 3: unshare(0x40007402) 11:09:58 executing program 5: unshare(0x40000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:58 executing program 2: unshare(0x40006203) 11:09:58 executing program 1: unshare(0x40000802) 11:09:58 executing program 3: unshare(0x40007403) [ 669.015863][ T7831] IPVS: ftp: loaded support on port[0] = 21 11:09:58 executing program 2: unshare(0x40006400) 11:09:58 executing program 0: unshare(0x40000332) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:58 executing program 1: unshare(0x40000803) 11:09:58 executing program 3: unshare(0x40007800) 11:09:58 executing program 2: unshare(0x40006401) 11:09:58 executing program 1: unshare(0x40000a00) [ 669.436101][ T7831] IPVS: ftp: loaded support on port[0] = 21 11:09:58 executing program 0: unshare(0x40000334) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:58 executing program 3: unshare(0x40007a00) 11:09:59 executing program 5: unshare(0x40000601) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:59 executing program 2: unshare(0x40006403) 11:09:59 executing program 1: unshare(0x40000a02) 11:09:59 executing program 3: unshare(0x40007a02) 11:09:59 executing program 0: unshare(0x40000336) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:59 executing program 2: unshare(0x40006600) 11:09:59 executing program 3: unshare(0x40007a03) 11:09:59 executing program 1: unshare(0x40000a03) 11:09:59 executing program 0: unshare(0x4000033a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:59 executing program 3: unshare(0x40007c00) 11:09:59 executing program 2: unshare(0x40006800) 11:09:59 executing program 5: unshare(0x40000700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:59 executing program 1: unshare(0x40000c00) 11:09:59 executing program 3: unshare(0x40007c02) 11:09:59 executing program 2: unshare(0x40006802) 11:09:59 executing program 1: unshare(0x40000c01) 11:09:59 executing program 0: unshare(0x4000033c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:09:59 executing program 3: unshare(0x40008002) 11:09:59 executing program 5: unshare(0x40000802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:00 executing program 2: unshare(0x40006803) 11:10:00 executing program 1: unshare(0x40000c02) 11:10:00 executing program 3: unshare(0x400080fe) 11:10:00 executing program 0: unshare(0x4000033f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:00 executing program 2: unshare(0x40006a03) 11:10:00 executing program 1: unshare(0x40000c03) 11:10:00 executing program 3: unshare(0x40008200) 11:10:00 executing program 5: unshare(0x40000a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:00 executing program 2: unshare(0x40006c00) 11:10:00 executing program 1: unshare(0x40000e03) 11:10:00 executing program 3: unshare(0x40008203) 11:10:00 executing program 0: unshare(0x40000340) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:00 executing program 2: unshare(0x40006c01) 11:10:00 executing program 1: unshare(0x40001100) 11:10:00 executing program 3: unshare(0x40008403) 11:10:00 executing program 5: unshare(0x40000c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:00 executing program 0: unshare(0x40000342) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:00 executing program 2: unshare(0x40006c03) 11:10:01 executing program 1: unshare(0x40001200) 11:10:01 executing program 3: unshare(0x40008a00) 11:10:01 executing program 5: unshare(0x40000c02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:01 executing program 3: unshare(0x40008a03) 11:10:01 executing program 1: unshare(0x40001202) 11:10:01 executing program 2: unshare(0x40007200) 11:10:01 executing program 5: unshare(0x40000e03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:01 executing program 0: unshare(0x40000344) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:01 executing program 2: unshare(0x40007202) 11:10:01 executing program 1: unshare(0x40001203) 11:10:01 executing program 3: unshare(0x40008c01) 11:10:01 executing program 5: unshare(0x40001100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:01 executing program 0: unshare(0x40000352) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:01 executing program 2: unshare(0x40007203) 11:10:01 executing program 3: unshare(0x40008e03) 11:10:01 executing program 1: unshare(0x40001400) 11:10:02 executing program 1: unshare(0x40001401) 11:10:02 executing program 3: unshare(0x40009403) 11:10:02 executing program 2: unshare(0x40007400) 11:10:02 executing program 5: unshare(0x40001200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:02 executing program 1: unshare(0x40001403) 11:10:02 executing program 0: unshare(0x40000356) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:02 executing program 2: unshare(0x40007402) 11:10:02 executing program 3: unshare(0x40009800) 11:10:02 executing program 1: unshare(0x40001603) 11:10:02 executing program 5: unshare(0x40001203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:02 executing program 2: unshare(0x40007403) 11:10:02 executing program 3: unshare(0x40009803) 11:10:02 executing program 1: unshare(0x40001803) 11:10:02 executing program 0: unshare(0x40000358) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:02 executing program 2: unshare(0x40007600) 11:10:02 executing program 5: unshare(0x40001400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:02 executing program 3: unshare(0x40009a02) 11:10:02 executing program 1: unshare(0x40001a00) 11:10:02 executing program 2: unshare(0x40007a00) 11:10:02 executing program 3: unshare(0x40009c00) 11:10:03 executing program 0: unshare(0x4000035a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:03 executing program 1: unshare(0x40001a01) 11:10:03 executing program 5: unshare(0x40001401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:03 executing program 2: unshare(0x40007a02) 11:10:03 executing program 3: unshare(0x40009c01) 11:10:03 executing program 1: unshare(0x40001a03) 11:10:03 executing program 2: unshare(0x40007a03) 11:10:03 executing program 0: unshare(0x4000035c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:03 executing program 3: unshare(0x40009c03) 11:10:03 executing program 5: unshare(0x40001403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:03 executing program 2: unshare(0x40007c00) 11:10:03 executing program 1: unshare(0x40001c02) 11:10:03 executing program 3: unshare(0x4000a203) 11:10:03 executing program 0: unshare(0x4000035e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:03 executing program 2: unshare(0x40007c02) 11:10:03 executing program 1: unshare(0x40001c03) 11:10:03 executing program 3: unshare(0x4000a401) 11:10:04 executing program 2: unshare(0x40008002) 11:10:04 executing program 5: unshare(0x40001600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$caif_stream(0x25, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r1, r2}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x0, 0x0, 0x5}, 0x7, 0x6e6bb1, 0x0, 0x1}, {{@in=@dev}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e24, 0x1f, 0x0, 0x80, 0x0, 0xff, 0x0, r2}, {0xffffffff, 0xfff, 0x6, 0x40, 0x913, 0x100000001, 0x2, 0x4}, {0xffffffffffffff01, 0xfffffffffffffffa, 0x0, 0x20000000000}, 0x0, 0x6e6bb4, 0x2, 0x1, 0x3, 0x3}, {{@in6=@private1, 0x4d5}, 0x0, @in=@multicast2, 0x3500, 0x0, 0x0, 0x8c, 0x6, 0x44}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41c008}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ac1414aa000000000000000000000000000004d500000000ff0100000000000000000000000000010100010000000002080000000000000056f33f5500000000f3fcffffffffffffff0f000000000000080000000000000007000000000000003e00000000000000ffff000000000000b8f70000000000001200000000000000ff7f00000000000000000000800000000104000027bd700005350000020000083400000000000000080016000000000008001e000300000008000b00000000c0a085b5c32134a306a17921be1b1a46825f6227bddc4da05272587333557cafd63b88d88ad606ef772f1254ccaa2cfb9a12"], 0x1ec}, 0x1, 0x0, 0x0, 0x24004001}, 0x4) r3 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) r5 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={r3, r4, r5}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004300)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)="efa8f28b8cc9232a55f32856eac6d2f7d1c62edcede03c573d1902c8439b5fc8f488d73ca086bbf21451cc81226b2e6f8ed7c922ab59f4787378f1db0547e8e63be5d64e3903fd986bf1aa8e403eb519f1f34177a6c82567e577289ada771d9586a09f272b455e259989e18dd101caa1100900ebc07d9ee20b", 0x79}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bd91cf9f7d3724dd2377c70ca4acc58dc3c2b00cfb472a604b23c570d2f6d15ab111a00058ec128563733364cbffb122f729e0698483e7ac29614fe20d3921794a5636f873f4bcfdbb3b9555a5c6c6526cdef947fedbb1328f42e8e7d4e5a7c9100a6e76da07a857895d614a2732e581be1a6867ee35afcef5f6c291a158a94e0c21652117b967cafa0f106b73eb7790456bb8a97fe630146750564adb2be1c9dcf0c20023921a0524", 0xa9}, {&(0x7f0000000040)="f8a7cf60b0db453e4fe910368622", 0xe}], 0x4, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x4000001}, {&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001440)="ba09c3b60921c43f095c8f68255a9d502e2185c0101fd84b711f1218506da6bdeeef32704f890559c54b3374fd00835f5c383b49eed0a8e94cb66af9e2ab04d2f507434adf34", 0x46}, {&(0x7f00000014c0)="40c61c8d78687d1e1189aaf5b60282bf42fc26d4d3cb0ffd74f10d4014fec4c44574d46b4202f384b2c8932e33d6fc78b55326034a0cb729d30e361dd8049a7197a4b4d04086fc3ac9b10f59", 0x4c}, {&(0x7f0000001540)="ec64dc9360dfb00c3ef94b3208b347287732b0fc1c72764f9f02cb8960636968d00e0bb3ffdb3529b1f20870379142267b44275b57d47c0ff6c39985b2267e03a97894631064e9938381cd661b3cf7a0d5b33532537b44ff6729ba514bf7d8590eed64e56c1cc3e9b57aa7e859822bb6dd091f7dc48aae83c51e8ae478b9638e11c0bad99d06bd812b2bc08787197204fd6f56d6382dd9d04e9ec6ce70cde3614a7a8f151d275171df97965e74a72908a3562f0b6621f5aad75f047f974317fa76895ba2d5905c303382e8cbb589e321627daf9abe2c204e67ea723f8d9f530637", 0xe1}, {&(0x7f0000001640)="2fbd87e449d9894be27ba447f8e975e8c076b21c28d8be04f110c08a946551201c75e062e0e12dc4369c391a8496515329749db9f5f4b5ac1439ef6b6930fb645df3584d4ffbe228", 0x48}, {&(0x7f00000016c0)="4ae1ff0943bdd351fd88cbb22af21ef8663055c193d3d0e1278d3226f01d1fcf520d8aeca7c07065b935e9bf20a5d0da9d9d3626f5d7c41ae75da7f239fae5cfe8e1bdaafa5a999de4e7fe04d7a4090e78697a1e55c29b62b1e2483d3ca984bfbf50332d9d77d96bd628ca513850369fd4b7f0e58a96af5fe12311620ad143447392df5f9030345456f3ba366ecf6ae728287ec8fe309167b0b39b150ea15c83215605f180fd72e08a51b942f9ea8dd554407495000765ea0f3d995bc2c892f819526a5b1349b21de31d8523781c8a64f0fd63e25894c549a7", 0xd9}, {&(0x7f00000017c0)="9e3965760ccb5b82df9985f3fe73698b227a391ef95d80bc2626f5849b2ee602f5c0", 0x22}, {&(0x7f0000001800)="b0de0467a75fe6dcff178f115c2cce51ff35260d8eca8a7ad09601d003f7b86afdd40a91d35acc1bf13e427f323b00bcb7e91e4d86717da3b2811bc7d4edf952cf4e3342674e13bae92931539c634ea0f7ed71a9d590c34fd7f06e3b68e7308abc90d6762a3fab59747ccdf06228876937e4963e02606cee57f5316c7448d77588ed223805dbafc60bde62ad01a99c5360f6c4ccadf31e0ad09ba38ff0fb21c53248fc8c89de152dce3d7f8ec804ea95e110df", 0xb3}, {&(0x7f00000018c0)="f30cb51141c9135d92d3c3974bce2ee13538ad0368cb90acf34293e180793b9b24fd7ab3e3981f469307472c6e48798a6f210729ebbae1515fed9526fe5770f5b527805c3541ac5e5a80760d1b7b534743eb85a0258f951318359ac62733242f4330b68963718d0073c63a751ee68441e7b3538e9bf3e0c3814dd04ff52607b4bcadfd1f03781b6b568553093d48c1242b7298672d2f01c4596382cbb29035bf9b63b5cc52872475ad309f01302e7d278d4c1a891b615a614d61df", 0xbb}], 0x8, 0x0, 0x0, 0x4040}, {&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a80)="d81616d73d4fe575abaee2fafc20c20d6efe185d93d1927e100bf01f664ad80608d4724799fe738b40519ebe28ec8ff8750c7a291288c43ac80eae5768f2911cd6074a9100b2314ac3a921e27e8dc2594a100e390fd51f8622f371b1ae90f117b7b021b302076fbb860f2b9edae03a23bc1c388c166472b6f387a7fbc9517f07e1c3561fcf81b29bf40c0d22e03d568184e163ee228d2c6aa0f6da70e6411260b5d9", 0xa2}], 0x1, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20, 0x24040044}, {&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001c40)="3a48b5ea9f72d60763a56f23af245c0711052aabfed30541c36c639cee96674d6cbae8014d67abda1e0cbec6087121bef885c216fae2fe25b928ff320b115457189c58be618fa4e03ba1dcbee672bc14961613661df918a6dd2c5d10bd4ef1a3390fbfdbe16900a524069333ad316a2b1b5241ac2eee7e37ad0a907a2509ab8a28135963dc03d156325759a7c90e7a3631071fa2e00f960b222d9b8e26473fc1a4cb521e15880782777a3007cc2689613a2d13f38334757b79888d7bb35a496604d7d666d8c076a8b0ff79b0e45bead4bc15f62e28da8db948921340f09259e89e", 0xe1}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="848976b8bdefd091e6aad269256ff7860906bfbe6bd4f49a4284207bc4bf5ffddd96f34156c13530c512123c0683a858733fe864eff6173c8fce5e9dcd5c448348279a46043b2da61bbc24d76ebcdc1d0736800f1d115e6fa0836156c226de791186a82f6fac2dd14f2b1f6c947f66266833ee108ca7489f7fec673e192a56e6277db49a3c10e504474dc6b2bf0eb482849e11", 0x93}, {&(0x7f0000002e00)="a55d5b6ecc9cb924d75b1b04781535881e60f40636795309a8ecc505bb99db671e96f6d9895aba2eac06f259f814d2f6ef868ecac528cc4615cd4f128fba4e7a94a6b4d4b09116aa4eb43053043c5ef8a9afe755f87ceb9b135038e234999aee5aa1a63c26315918f8f5ea3ff648b5a767979c8f0c4f19f39ab0d9a6df16cacd2c04ed3f9b4fdcd87a2ec324b00e65ab896c137756e54da579c5a940e0c64433d76c54801329b7100acc227b6722741c8ae7a5f4cd84a31c513585bcc1e3b9949b30317f7cd48ac118f8226e93e0954acbae3234", 0xd4}, {&(0x7f0000002f00)="1484d8e4633a07e15d31601841ef7d1189c8bd447300169bd4c4b1e0f5c61c5daaff336d8f7c850f27fa8492ad883d625f9224cedd53ec40ac9d68b94bd380974e111faff1e11b34b26cd1f36c7a04d089bdf10e992bc6cef3afea79972a3908e1eb4561eb9fb5879d929296b8b86f276b878ead892e09809e58bf483051f378f35924cfe38baec0361a85d59280c504d96604a06baf0007e422a25db08c2a09e53cdad47bee07de3489d0c7e1fe53bc40d59e7f76a7a2f1db8d261c5c8f1f693fc0f6aae8e88f5d2dbceb02cf29a6338d9e7d3d5adf21e23036f03ef27f3d", 0xdf}], 0x5, &(0x7f00000030c0)=[@cred={{0x1c}}], 0x20, 0x20000814}, {&(0x7f0000003100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000003180)="dee6e26cdfa5e81eb0dac10142979adcbba89fe73885344ffce73cb1065b0d67a5e9a937f32422236dfa3c48a5172508469939c715f450e0189b8eb260a7e244e08a1b6a13b471c5322c5aa3887d14b604f06111cebbca83dadd26297d5891c1af61453371fce8d45ddf82f110f1f800d3b62768481225ddf6ccb2cc160ddb45f113642feb8b9ce445772d15d7c5faa03b6110879d7895bf82da3f0cf66f29cfcb3474d3c16d2864f75e0ed188c05b33d34246c238d70bdf4ae9b3142882841d92f777c2193e3800e3063d12cd33a8fd48de3b81266b9ad449ac8ae9b0088e39d037c4d9", 0xe4}, {&(0x7f0000003280)="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", 0x1000}], 0x2, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r5}}}], 0x20, 0x8000}], 0x5, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x61d10000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100002a00) 11:10:04 executing program 0: unshare(0x40000362) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:04 executing program 1: unshare(0x40001f00) 11:10:04 executing program 3: unshare(0x4000a403) 11:10:04 executing program 2: unshare(0x400080fe) 11:10:04 executing program 3: unshare(0x4000aa00) 11:10:04 executing program 1: unshare(0x40002000) 11:10:04 executing program 2: unshare(0x40008200) 11:10:04 executing program 5: unshare(0x40001a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:04 executing program 0: unshare(0x40000364) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:04 executing program 3: unshare(0x4000ac01) 11:10:04 executing program 1: unshare(0x40002200) [ 675.815336][ T28] audit: type=1804 audit(1592565005.132:381): pid=8295 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/523/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 675.853729][ T28] audit: type=1804 audit(1592565005.132:382): pid=8297 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/523/cgroup.controllers" dev="sda1" ino=16377 res=1 11:10:05 executing program 0: unshare(0x4000036a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:05 executing program 2: unshare(0x40008203) 11:10:05 executing program 3: unshare(0x4000ac02) 11:10:05 executing program 1: unshare(0x40002202) 11:10:05 executing program 5: unshare(0x40001c02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 676.032847][ T28] audit: type=1804 audit(1592565005.352:383): pid=8332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/523/cgroup.controllers" dev="sda1" ino=16377 res=1 11:10:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x81000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x81000) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) accept4$inet6(r5, 0x0, &(0x7f0000000100), 0x81000) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000200)) sendfile(r4, r3, 0x0, 0x100002a00) 11:10:05 executing program 2: unshare(0x40008403) 11:10:05 executing program 3: unshare(0x4000ac03) 11:10:05 executing program 1: unshare(0x40002203) 11:10:05 executing program 0: unshare(0x4000036c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:05 executing program 3: unshare(0x4000b001) 11:10:05 executing program 5: unshare(0x40001f00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:05 executing program 2: unshare(0x40008800) 11:10:05 executing program 1: unshare(0x40002402) 11:10:05 executing program 3: unshare(0x4000b202) 11:10:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000016c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000017c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001800)={'wg2\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000001900)={@private, @multicast1, 0x0}, &(0x7f0000001940)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001b00)={0x418, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xc3d}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1be9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5a51}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r6}, {0x18c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x38eb}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0x1, 0xfe, 0x4}, {0x400, 0x7c, 0xff, 0x80}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6c6ba8cb}}}]}}]}, 0x418}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004041) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, r1, 0x0, 0x100002a00) 11:10:05 executing program 0: unshare(0x40000379) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:06 executing program 2: unshare(0x40008803) 11:10:06 executing program 1: unshare(0x40002403) 11:10:06 executing program 3: unshare(0x4000b203) 11:10:06 executing program 5: unshare(0x40002000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 676.810877][ T28] audit: type=1804 audit(1592565006.132:384): pid=8393 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/525/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 676.865175][ T8399] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:06 executing program 2: unshare(0x40008a00) [ 676.908340][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:06 executing program 0: unshare(0x40000382) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:06 executing program 1: unshare(0x40002a00) 11:10:06 executing program 3: unshare(0x4000b403) 11:10:06 executing program 2: unshare(0x40008a03) 11:10:06 executing program 5: unshare(0x40002200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x8, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000200)=""/124, 0x7c}, &(0x7f0000000100), 0x30}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100002a00) 11:10:06 executing program 1: unshare(0x40002a02) 11:10:06 executing program 3: unshare(0x4000ba00) 11:10:06 executing program 0: unshare(0x40000384) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:06 executing program 2: unshare(0x40008c01) 11:10:06 executing program 5: unshare(0x40002402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:06 executing program 1: unshare(0x40002a03) 11:10:06 executing program 3: unshare(0x4000ba03) 11:10:06 executing program 2: unshare(0x40008e02) 11:10:07 executing program 0: unshare(0x4000038a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 677.731142][ T28] audit: type=1804 audit(1592565007.052:385): pid=8457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/526/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 677.769535][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:07 executing program 3: unshare(0x4000bc00) 11:10:07 executing program 2: unshare(0x40008e03) 11:10:07 executing program 5: unshare(0x40002a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:07 executing program 1: unshare(0x40002e03) 11:10:07 executing program 3: unshare(0x4000bc01) 11:10:07 executing program 2: unshare(0x40009403) 11:10:07 executing program 0: unshare(0x4000038e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0xffffffffffffffd0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ce2e56070cd011c0000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:10:07 executing program 1: unshare(0x40003000) 11:10:07 executing program 3: unshare(0x4000bc03) 11:10:07 executing program 2: unshare(0x40009803) [ 678.397756][ T28] audit: type=1804 audit(1592565007.712:386): pid=8508 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/527/cgroup.controllers" dev="sda1" ino=16365 res=1 11:10:07 executing program 5: unshare(0x40002a03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:07 executing program 0: unshare(0x40000390) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:07 executing program 1: unshare(0x40003001) 11:10:07 executing program 3: unshare(0x4000c000) 11:10:07 executing program 2: unshare(0x40009a02) 11:10:08 executing program 1: unshare(0x40003200) 11:10:08 executing program 2: unshare(0x40009c00) 11:10:08 executing program 0: unshare(0x40000394) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:08 executing program 3: unshare(0x4000c003) 11:10:08 executing program 5: unshare(0x40003201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100002a00) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x728}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) 11:10:08 executing program 1: unshare(0x40003201) 11:10:08 executing program 3: unshare(0x4000c0fe) 11:10:08 executing program 2: unshare(0x40009c01) [ 679.123191][ T28] audit: type=1804 audit(1592565008.442:387): pid=8562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/528/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 679.125050][ T8562] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:08 executing program 0: unshare(0x40000398) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:08 executing program 2: unshare(0x40009c03) 11:10:08 executing program 5: unshare(0x40003203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:08 executing program 1: unshare(0x40003203) 11:10:08 executing program 3: unshare(0x4000c0ff) 11:10:08 executing program 0: unshare(0x4000039a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:08 executing program 3: unshare(0x4000c201) 11:10:08 executing program 1: unshare(0x40003403) 11:10:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6}, 0x5) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100002a00) 11:10:08 executing program 2: unshare(0x4000a203) 11:10:09 executing program 5: unshare(0x40003400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:09 executing program 2: unshare(0x4000a401) 11:10:09 executing program 3: unshare(0x4000c402) 11:10:09 executing program 1: unshare(0x40003603) 11:10:09 executing program 0: unshare(0x4000039c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:09 executing program 2: unshare(0x4000a403) [ 679.950291][ T28] audit: type=1804 audit(1592565009.262:388): pid=8625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/529/cgroup.controllers" dev="sda1" ino=16245 res=1 11:10:09 executing program 3: unshare(0x4000c601) 11:10:09 executing program 1: unshare(0x40003800) 11:10:09 executing program 5: unshare(0x40003403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:09 executing program 2: unshare(0x4000ac01) 11:10:09 executing program 0: unshare(0x400003a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:09 executing program 3: unshare(0x4000c801) 11:10:09 executing program 1: unshare(0x40003a00) 11:10:09 executing program 2: unshare(0x4000ac02) 11:10:09 executing program 5: unshare(0x40003800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'netdevsim0\x00', {0x4c3}, 0x1000}) mmap(&(0x7f00001d4000/0x1000)=nil, 0x1000, 0x1000006, 0x4010, r0, 0xea0fe000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000300)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000440)={0x5083, 0x8008, 0x100006, 0x3, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x10001}}}, &(0x7f00000002c0)=0x84) sendfile(r4, r2, 0x0, 0x100002a00) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r7, 0x0, 0x0, 0x4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x7, 0xffffffff, 0x800, 0x4, 0x563a, 0x0, 0x81, {r7, @in6={{0xa, 0x4e22, 0x2, @remote, 0x7e12}}, 0x1, 0x8001, 0x8000, 0xd79, 0x3}}, &(0x7f0000000400)=0xb0) 11:10:09 executing program 3: unshare(0x4000c803) 11:10:09 executing program 1: unshare(0x40003a01) 11:10:10 executing program 2: unshare(0x4000ac03) 11:10:10 executing program 3: unshare(0x4000ca03) [ 680.732482][ T8683] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 680.779667][ T28] audit: type=1804 audit(1592565010.092:389): pid=8687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/530/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 680.787782][ T8687] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:10 executing program 0: unshare(0x400003a4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:10 executing program 5: unshare(0x40003a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:10 executing program 1: unshare(0x40003a02) 11:10:10 executing program 2: unshare(0x4000b202) [ 680.900488][ T8687] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:10 executing program 3: unshare(0x4000cc02) 11:10:10 executing program 1: unshare(0x40003a03) [ 681.019452][ T28] audit: type=1804 audit(1592565010.332:390): pid=8700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/530/cgroup.controllers" dev="sda1" ino=16379 res=1 11:10:10 executing program 2: unshare(0x4000b203) [ 681.136721][ T28] audit: type=1804 audit(1592565010.362:391): pid=8702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/530/cgroup.controllers" dev="sda1" ino=16379 res=1 11:10:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = accept(r2, 0x0, &(0x7f0000000540)) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3e4, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_PAYLOAD={0x4}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_PAYLOAD={0xcc, 0xa, "ceca0608d36b394541b51d079b77b2102131e3c9d86db04d2ca3744b394a42d08dc6462a71977cf96af3da5b7b76e6ba4b206c7db3efb904f3f3dacaef59dfa99d736aa16d99fc23cf030b6d1a8451f8e847dc8237d0448db29426f111233b98c822cb280ea4a155acbb919aa1a048f87bd313702e6ee8857f28e097caa27c5c14ff7b66ed759735209ca51d800d752ce30efd18e0aff6f85bee948aaac8dd9241c238981c5c895934face6a642f72865c35d48def20c950566225917c3ca366284784bcef995b5f"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}, @NFQA_PAYLOAD={0xd2, 0xa, "2a4c84ce2e052d08baa85727795facd6220917a0d8188381385d3de80c50ad1a94be6076af65cc38417b4a9c58add6c4698978c4d70115164a7ed68962938759b692915c077025c5157386c8a6bb34aa37eed4ff13772d21e02d3b8f2f60a370aa73ea179f639561a29955a0841a97881324ead1b829a1d379039dbadd200f2d365fff4ca2c283518d477648d4cacc3e4fae178797cabf7d2fb65324b0ec0832b4b124b78e8a6a428effddb67fd0fb43153e3ce11cfeee4cf73f70556db41fbf6dc00daf4fd9c60b863a17881a02"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}, @NFQA_PAYLOAD={0xf0, 0xa, "5781520fbfaa79d13a2937a22af14ba7ff3b984227405422f89ec5095cf63b63650f14a61361b802dbe8ecb02091f8fb557b19d97e4dcb24b47465a6958064aa43f84903699ad74e8a2ec0ce2d81cd41882b5aa0b4613320322244f407b7958597b0312e54a559284f28f59ad6427e024c17a00795689ed37e5eadcdcb0d35f385f84e86672b0a52603240e4c53746709ae0097f12fc71689986f4a8dc4d6ed7ff1fd62c35d1d7b25dc4f4661b66b42795006d418a88f95957259005a7a14dd01d1be0e28e2f270a71d9abd7bf42ef96bb73c4d50e04981c8ab97259ee64d96d793db72b2c87445fa83820a2"}, @NFQA_PAYLOAD={0xd1, 0xa, "963b8db2c6ae6b284e554f43cc4d67fc9bed617c64ac121fe8f55e7823d172d7a933a68a4cf62d4e28b2081766e3dc1fd73e5fa84ec94edcadc2213da5325bc0fda831bd2a95941caa25483dee81558a75e844e27d3eaa11aa393485a02efa995a6e95e5d77ab4b376448b1c1a28a05d6fcd64befcab657a428d9216aa516b5f7f5b7ad873872e7c31b0422d6af762f9edc310ac0876ec01e0e52b09f542443312e244c8a2bab72c6a825f10d49e1e70a473098bc0496aae9d3e26b2d6d06a87788cbfc72ede22828909daa22f"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100002a00) 11:10:10 executing program 0: unshare(0x400003a8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:10 executing program 5: unshare(0x40003a01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:10 executing program 3: unshare(0x4000cc03) 11:10:10 executing program 2: unshare(0x4000b403) 11:10:10 executing program 1: unshare(0x40003b00) 11:10:10 executing program 2: unshare(0x4000ba00) 11:10:10 executing program 3: unshare(0x4000cf01) 11:10:10 executing program 1: unshare(0x40003c01) [ 681.598788][ T28] audit: type=1804 audit(1592565010.912:392): pid=8747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/531/cgroup.controllers" dev="sda1" ino=16245 res=1 [ 681.599482][ T8747] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 681.655199][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:11 executing program 5: unshare(0x40003a02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:11 executing program 2: unshare(0x4000ba03) 11:10:11 executing program 0: unshare(0x400003ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:11 executing program 1: unshare(0x40003c02) 11:10:11 executing program 3: unshare(0x4000d003) 11:10:11 executing program 2: unshare(0x4000bc01) 11:10:11 executing program 5: unshare(0x40003c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:11 executing program 0: unshare(0x400003b2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000410000b0005009488dea4e50778cea0c601000700"/35], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = socket(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002c80)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r5}, 0xc) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000240)="240000001a005f0014f9f4070009040000000000000000000000000008001b00013d0000088ccb569c191d63541afb47ed7aac030401f7fe1ccb3b472a699b8881fc3687ccd8f50998e6b5e03e593708faaee13b884e9996bb365ed58474eddb05686393ae7d0a871238bb94606c19bec31fe9b87105a1b57312f3cd2c6b13cf37bbf3d5f2ce83c1247ca6b24defa562214debca618f42120ee0eb686c4feecd5f0bb9eda75623b01ec7", 0xaa) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000000200)={0x20}) accept4$bt_l2cap(r6, &(0x7f0000000100), &(0x7f0000000180)=0xe, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'ipvlan1\x00', {0x1}}) 11:10:11 executing program 3: unshare(0x4000d200) 11:10:11 executing program 2: unshare(0x4000bc03) 11:10:11 executing program 1: unshare(0x40003c03) [ 682.367021][ T28] audit: type=1804 audit(1592565011.682:393): pid=8798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/532/cgroup.controllers" dev="sda1" ino=16384 res=1 11:10:11 executing program 5: unshare(0x40003c03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:11 executing program 0: unshare(0x400003b4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 682.491527][ T8815] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:11 executing program 3: unshare(0x4000d203) [ 682.549246][ T8819] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:11 executing program 2: unshare(0x4000c000) 11:10:11 executing program 1: unshare(0x40003e02) 11:10:12 executing program 2: unshare(0x4000c0fe) 11:10:12 executing program 3: unshare(0x4000d401) 11:10:12 executing program 1: unshare(0x40003f00) 11:10:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x81000) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280)=0x2, 0x4) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000200)={'veth0_to_team\x00', {0x2, 0x4e23, @rand_addr=0x64010102}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.events\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100002a00) 11:10:13 executing program 0: unshare(0x400003b8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:13 executing program 5: unshare(0x40003f00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:13 executing program 3: unshare(0x4000d402) 11:10:13 executing program 2: unshare(0x4000c201) 11:10:13 executing program 1: unshare(0x40003f03) 11:10:13 executing program 2: unshare(0x4000c402) 11:10:13 executing program 1: unshare(0x40004000) 11:10:13 executing program 3: unshare(0x4000d403) [ 684.357617][ T8869] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:13 executing program 5: unshare(0x40003f03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 684.485443][ T8876] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:13 executing program 0: unshare(0x400003ba) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 684.527812][ T8869] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:13 executing program 2: unshare(0x4000c601) 11:10:13 executing program 1: unshare(0x40004003) 11:10:13 executing program 3: unshare(0x4000d800) 11:10:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e24, @loopback}, 0x18, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='lo\x00', 0x401, 0x7, 0x6}) sendfile(r2, r1, 0x0, 0x100002a00) 11:10:14 executing program 2: unshare(0x4000c800) 11:10:14 executing program 1: unshare(0x40004200) 11:10:14 executing program 5: unshare(0x40004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:14 executing program 3: unshare(0x4000da02) 11:10:14 executing program 0: unshare(0x400003bc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:14 executing program 2: unshare(0x4000c803) 11:10:14 executing program 1: unshare(0x40004202) 11:10:14 executing program 3: unshare(0x4000da03) 11:10:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) r2 = accept(r1, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x0, @broadcast, 0x4e23, 0x1, 'wlc\x00', 0x2f, 0xeb44, 0x11}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x1, 0x100, 0x5, 0x4e}}, 0x44) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001580)={r4, @in={{0x2, 0x4e23, @remote}}, [0x8, 0xff, 0xfff, 0x40, 0x6000000000000, 0x8, 0x2829, 0x4, 0xfff, 0x6, 0x2, 0x4, 0x5, 0xd30, 0xa8]}, &(0x7f0000001680)=0x100) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) recvmsg(r5, &(0x7f0000001540)={&(0x7f0000000380)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f0000001440)=""/227, 0xe3}, 0x2020) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, 0xa, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={[], 0x27}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:10:14 executing program 3: unshare(0x4000dc02) 11:10:14 executing program 5: unshare(0x40004003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:14 executing program 2: unshare(0x4000ca03) [ 685.262802][ T28] audit: type=1804 audit(1592565014.582:394): pid=8935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/535/cgroup.controllers" dev="sda1" ino=16384 res=1 11:10:14 executing program 1: unshare(0x40004203) 11:10:14 executing program 0: unshare(0x400003c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 685.308061][ T8942] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 685.332173][ T8935] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendfile(r1, r2, 0x0, 0x100002a00) 11:10:14 executing program 3: unshare(0x4000e001) 11:10:14 executing program 1: unshare(0x40004401) 11:10:14 executing program 2: unshare(0x4000cc02) 11:10:15 executing program 5: unshare(0x40004400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:15 executing program 0: unshare(0x400003c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:15 executing program 1: unshare(0x40004402) 11:10:15 executing program 2: unshare(0x4000cc03) 11:10:15 executing program 3: unshare(0x4000e200) [ 685.871410][ T28] audit: type=1804 audit(1592565015.193:395): pid=8977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/536/cgroup.controllers" dev="sda1" ino=16371 res=1 [ 685.897860][ T8977] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:15 executing program 2: unshare(0x4000cf01) 11:10:15 executing program 1: unshare(0x40004403) 11:10:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010107"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:10:15 executing program 3: unshare(0x4000e201) 11:10:15 executing program 5: unshare(0x40004401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:15 executing program 0: unshare(0x400003c8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:15 executing program 2: unshare(0x4000d003) 11:10:15 executing program 1: unshare(0x40004600) 11:10:15 executing program 3: unshare(0x4000e403) 11:10:15 executing program 2: unshare(0x4000d200) 11:10:15 executing program 1: unshare(0x40004800) [ 686.349681][ T28] audit: type=1804 audit(1592565015.663:396): pid=9020 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/537/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 686.389334][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:15 executing program 3: unshare(0x4000e603) 11:10:15 executing program 5: unshare(0x40004600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:15 executing program 0: unshare(0x400003ca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:16 executing program 2: unshare(0x4000d203) 11:10:16 executing program 1: unshare(0x40004802) 11:10:16 executing program 3: unshare(0x4000ea02) 11:10:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) tee(r1, r2, 0x2, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100002a00) 11:10:16 executing program 5: unshare(0x40004800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:16 executing program 1: unshare(0x40004803) 11:10:16 executing program 3: unshare(0x4000ea03) 11:10:16 executing program 2: unshare(0x4000d401) 11:10:16 executing program 0: unshare(0x400003cc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 687.054587][ T9078] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 687.110026][ T9078] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:16 executing program 1: unshare(0x40004a00) 11:10:16 executing program 3: unshare(0x4000ec03) 11:10:16 executing program 2: unshare(0x4000d402) [ 687.193108][ T28] audit: type=1804 audit(1592565016.513:397): pid=9076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/538/cgroup.controllers" dev="sda1" ino=16196 res=1 [ 687.206651][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:16 executing program 5: unshare(0x40004a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:16 executing program 1: unshare(0x40004a02) 11:10:16 executing program 3: unshare(0x4000ee03) [ 687.804433][ T28] audit: type=1804 audit(1592565017.123:398): pid=9078 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/538/cgroup.controllers" dev="sda1" ino=16196 res=1 11:10:17 executing program 2: unshare(0x4000d403) 11:10:17 executing program 0: unshare(0x400003d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:17 executing program 1: unshare(0x40004a03) 11:10:17 executing program 3: unshare(0x4000f000) 11:10:17 executing program 5: unshare(0x40004c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getpeername(r2, &(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000002700)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r4, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff49c3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x240008c4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x100002a00) 11:10:17 executing program 3: unshare(0x4000f200) 11:10:17 executing program 1: unshare(0x40004c00) 11:10:17 executing program 2: unshare(0x4000d803) 11:10:17 executing program 0: unshare(0x400003d2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:17 executing program 3: unshare(0x4000f202) 11:10:17 executing program 5: unshare(0x40004c02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 688.153069][ T28] audit: type=1804 audit(1592565017.473:399): pid=9139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/539/cgroup.controllers" dev="sda1" ino=15969 res=1 [ 688.180040][ T9139] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:17 executing program 1: unshare(0x40004c01) 11:10:17 executing program 2: unshare(0x4000da02) 11:10:17 executing program 1: unshare(0x40004c02) 11:10:17 executing program 3: unshare(0x4000f203) 11:10:17 executing program 2: unshare(0x4000da03) 11:10:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0x6a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', r3}) socket$pptp(0x18, 0x1, 0x2) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000104060102000080000000000010000b00010007"], 0x1}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r6) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5452, &(0x7f0000000040)) accept4$inet6(r6, 0x0, &(0x7f0000000100), 0x81000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r6, r7, 0x13}, 0x10) sendfile(r5, r4, 0x0, 0x100002a00) 11:10:17 executing program 5: unshare(0x40004e01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:17 executing program 0: unshare(0x400003d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:17 executing program 2: unshare(0x4000dc02) 11:10:17 executing program 1: unshare(0x40004c03) 11:10:17 executing program 3: unshare(0x4000f400) 11:10:18 executing program 1: unshare(0x40004e01) 11:10:18 executing program 2: unshare(0x4000dc03) 11:10:18 executing program 3: unshare(0x4000f401) 11:10:18 executing program 0: unshare(0x400003d6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:18 executing program 5: unshare(0x40005200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:18 executing program 2: unshare(0x4000e001) 11:10:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000b30901020000000000000000070000090c0004800800014000000401080005400000000a8e693c5108131e883a751c17650ce63030ce30aec0177509514ca9a4bafccbe96e4ce8990f5e2aa8855503198c6442e3b82f2a92a76ef7290fe11bb97dc40f6ef9d201ca35b7a32d462282efa9e998e14050a1122aa255e32f17d2f2c235afed3b2ebe9d97d6ac04fb0647cb5e82520fdb82ca447c9c67641867e8dcc8524bfb903a6f2c333c5533c67647af8c42f796ef30a133fb94837be4219c3e72dbc26e65dcc6197bf98c70c71730ede1fd0c3a109d4a5fb02fb5d95be36863"], 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x8400) sendfile(r2, r1, 0x0, 0x100002a00) socketpair(0xf, 0x2, 0x7, &(0x7f0000000240)) 11:10:18 executing program 1: unshare(0x40005003) 11:10:18 executing program 3: unshare(0x4000f403) 11:10:18 executing program 0: unshare(0x400003da) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:18 executing program 2: unshare(0x4000e003) 11:10:18 executing program 1: unshare(0x40005200) 11:10:18 executing program 5: unshare(0x40005203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:18 executing program 3: unshare(0x4000f803) [ 689.307659][ T28] audit: type=1804 audit(1592565018.623:400): pid=9235 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/541/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 689.339940][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:18 executing program 2: unshare(0x4000e200) 11:10:18 executing program 1: unshare(0x40005201) 11:10:18 executing program 3: unshare(0x4000fa00) 11:10:18 executing program 5: unshare(0x40005803) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:19 executing program 0: unshare(0x400003dc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:19 executing program 2: unshare(0x4000e201) 11:10:19 executing program 1: unshare(0x40005203) 11:10:19 executing program 3: unshare(0x4000fa02) 11:10:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x27, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f40002121d0000000000000000000800"/36, 0x24) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x1}}, 0x805) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100002a00) r6 = socket(0x10, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r7) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x5452, &(0x7f0000000040)) accept4$inet6(r7, 0x0, &(0x7f0000000100), 0x81000) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000180)=0x4) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000100)=0x1e) 11:10:19 executing program 1: unshare(0x40005402) 11:10:19 executing program 2: unshare(0x4000e403) 11:10:19 executing program 3: unshare(0x4000fa03) [ 690.004144][ T28] audit: type=1804 audit(1592565019.323:401): pid=9287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/542/cgroup.controllers" dev="sda1" ino=15895 res=1 11:10:19 executing program 5: unshare(0x40005a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:19 executing program 0: unshare(0x400003e4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 690.083099][ T9295] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:19 executing program 1: unshare(0x40005600) 11:10:19 executing program 2: unshare(0x4000e603) 11:10:19 executing program 3: unshare(0x4000fc00) 11:10:19 executing program 2: unshare(0x4000ea02) 11:10:19 executing program 1: unshare(0x40005602) 11:10:19 executing program 5: unshare(0x40005a01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:19 executing program 3: unshare(0x4000fc01) 11:10:19 executing program 0: unshare(0x400003e6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x2c040000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010072"], 0x1}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x4, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f40700090400020000000000000008001b00013d000000000000", 0x24) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000040)={0x2, [0x0, 0x0]}) sendfile(r4, r3, 0x0, 0x100002a00) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) poll(&(0x7f0000000180)=[{r0, 0x282}, {r7, 0x4200}], 0x2, 0x8) 11:10:19 executing program 2: unshare(0x4000ea03) 11:10:19 executing program 1: unshare(0x40005603) 11:10:20 executing program 3: unshare(0x4000fc03) 11:10:20 executing program 1: unshare(0x40005803) 11:10:20 executing program 2: unshare(0x4000ec03) 11:10:20 executing program 5: unshare(0x40005a03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 690.795025][ T9357] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:20 executing program 0: unshare(0x400003ea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:20 executing program 3: unshare(0x4000fe03) 11:10:20 executing program 2: unshare(0x4000ee03) [ 690.910303][ T28] audit: type=1804 audit(1592565020.233:402): pid=9357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/543/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 690.944865][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:20 executing program 1: unshare(0x40005a00) [ 690.988729][ T9362] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 691.037009][ T9362] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:20 executing program 2: unshare(0x4000f000) 11:10:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x2c040000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010072"], 0x1}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x4, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f40700090400020000000000000008001b00013d000000000000", 0x24) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000040)={0x2, [0x0, 0x0]}) sendfile(r4, r3, 0x0, 0x100002a00) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000140)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) poll(&(0x7f0000000180)=[{r0, 0x282}, {r7, 0x4200}], 0x2, 0x8) 11:10:20 executing program 3: unshare(0x4000fe80) 11:10:20 executing program 1: unshare(0x40005a01) 11:10:20 executing program 5: unshare(0x40005c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:20 executing program 0: unshare(0x400003ec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:20 executing program 2: unshare(0x4000f200) 11:10:20 executing program 3: unshare(0x4000fec0) 11:10:20 executing program 2: unshare(0x4000f202) 11:10:20 executing program 1: unshare(0x40005a02) [ 691.618172][ T9413] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:21 executing program 0: unshare(0x400003ee) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:21 executing program 3: unshare(0x4000ff00) 11:10:21 executing program 5: unshare(0x40005c03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 691.874672][ T28] audit: type=1804 audit(1592565021.193:403): pid=9413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/544/cgroup.controllers" dev="sda1" ino=16164 res=1 [ 691.965883][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 692.008298][ T9413] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 692.043384][ T9413] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000b30901020000000000000000070000090c0004800800014000000401080005400000000a8e693c5108131e883a751c17650ce63030ce30aec0177509514ca9a4bafccbe96e4ce8990f5e2aa8855503198c6442e3b82f2a92a76ef7290fe11bb97dc40f6ef9d201ca35b7a32d462282efa9e998e14050a1122aa255e32f17d2f2c235afed3b2ebe9d97d6ac04fb0647cb5e82520fdb82ca447c9c67641867e8dcc8524bfb903a6f2c333c5533c67647af8c42f796ef30a133fb94837be4219c3e72dbc26e65dcc6197bf98c70c71730ede1fd0c3a109d4a5fb02fb5d95be36863"], 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x8400) sendfile(r2, r1, 0x0, 0x100002a00) socketpair(0xf, 0x2, 0x7, &(0x7f0000000240)) 11:10:21 executing program 2: unshare(0x4000f203) 11:10:21 executing program 1: unshare(0x40005a03) 11:10:21 executing program 3: unshare(0x4000ff0f) 11:10:21 executing program 5: unshare(0x40005e03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:21 executing program 0: unshare(0x400003f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:21 executing program 3: unshare(0x4000ffc0) 11:10:21 executing program 2: unshare(0x4000f400) 11:10:21 executing program 1: unshare(0x40005c00) 11:10:21 executing program 5: unshare(0x40006000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:21 executing program 0: unshare(0x400003f2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:21 executing program 3: unshare(0x41000000) [ 692.627377][ T28] audit: type=1804 audit(1592565021.943:404): pid=9473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/545/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 692.668802][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000410000b0005009488dea4e50778cea0c601000700"/35], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) r3 = socket(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002c80)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r5}, 0xc) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000240)="240000001a005f0014f9f4070009040000000000000000000000000008001b00013d0000088ccb569c191d63541afb47ed7aac030401f7fe1ccb3b472a699b8881fc3687ccd8f50998e6b5e03e593708faaee13b884e9996bb365ed58474eddb05686393ae7d0a871238bb94606c19bec31fe9b87105a1b57312f3cd2c6b13cf37bbf3d5f2ce83c1247ca6b24defa562214debca618f42120ee0eb686c4feecd5f0bb9eda75623b01ec7", 0xaa) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$IMGETDEVINFO(r7, 0x80044944, &(0x7f0000000200)={0x20}) accept4$bt_l2cap(r6, &(0x7f0000000100), &(0x7f0000000180)=0xe, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'ipvlan1\x00', {0x1}}) 11:10:22 executing program 2: unshare(0x4000f401) 11:10:22 executing program 1: unshare(0x40005c02) 11:10:22 executing program 5: unshare(0x40006001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:22 executing program 3: unshare(0x4a000000) 11:10:22 executing program 0: unshare(0x400003f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:22 executing program 2: unshare(0x4000f403) 11:10:22 executing program 1: unshare(0x40005c03) [ 693.137458][ T9509] IPVS: ftp: loaded support on port[0] = 21 11:10:22 executing program 5: unshare(0x40006003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:22 executing program 0: unshare(0x400003f6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:22 executing program 2: unshare(0x4000f803) 11:10:22 executing program 1: unshare(0x40005e03) [ 693.357359][ T28] audit: type=1804 audit(1592565022.673:405): pid=9517 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/546/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 693.535926][ T9562] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 693.607761][ T9570] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 693.773392][ T9509] IPVS: ftp: loaded support on port[0] = 21 11:10:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = accept(r2, 0x0, &(0x7f0000000540)) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3e4, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_PAYLOAD={0x4}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_PAYLOAD={0xcc, 0xa, "ceca0608d36b394541b51d079b77b2102131e3c9d86db04d2ca3744b394a42d08dc6462a71977cf96af3da5b7b76e6ba4b206c7db3efb904f3f3dacaef59dfa99d736aa16d99fc23cf030b6d1a8451f8e847dc8237d0448db29426f111233b98c822cb280ea4a155acbb919aa1a048f87bd313702e6ee8857f28e097caa27c5c14ff7b66ed759735209ca51d800d752ce30efd18e0aff6f85bee948aaac8dd9241c238981c5c895934face6a642f72865c35d48def20c950566225917c3ca366284784bcef995b5f"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}, @NFQA_PAYLOAD={0xd2, 0xa, "2a4c84ce2e052d08baa85727795facd6220917a0d8188381385d3de80c50ad1a94be6076af65cc38417b4a9c58add6c4698978c4d70115164a7ed68962938759b692915c077025c5157386c8a6bb34aa37eed4ff13772d21e02d3b8f2f60a370aa73ea179f639561a29955a0841a97881324ead1b829a1d379039dbadd200f2d365fff4ca2c283518d477648d4cacc3e4fae178797cabf7d2fb65324b0ec0832b4b124b78e8a6a428effddb67fd0fb43153e3ce11cfeee4cf73f70556db41fbf6dc00daf4fd9c60b863a17881a02"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}, @NFQA_PAYLOAD={0xf0, 0xa, "5781520fbfaa79d13a2937a22af14ba7ff3b984227405422f89ec5095cf63b63650f14a61361b802dbe8ecb02091f8fb557b19d97e4dcb24b47465a6958064aa43f84903699ad74e8a2ec0ce2d81cd41882b5aa0b4613320322244f407b7958597b0312e54a559284f28f59ad6427e024c17a00795689ed37e5eadcdcb0d35f385f84e86672b0a52603240e4c53746709ae0097f12fc71689986f4a8dc4d6ed7ff1fd62c35d1d7b25dc4f4661b66b42795006d418a88f95957259005a7a14dd01d1be0e28e2f270a71d9abd7bf42ef96bb73c4d50e04981c8ab97259ee64d96d793db72b2c87445fa83820a2"}, @NFQA_PAYLOAD={0xd1, 0xa, "963b8db2c6ae6b284e554f43cc4d67fc9bed617c64ac121fe8f55e7823d172d7a933a68a4cf62d4e28b2081766e3dc1fd73e5fa84ec94edcadc2213da5325bc0fda831bd2a95941caa25483dee81558a75e844e27d3eaa11aa393485a02efa995a6e95e5d77ab4b376448b1c1a28a05d6fcd64befcab657a428d9216aa516b5f7f5b7ad873872e7c31b0422d6af762f9edc310ac0876ec01e0e52b09f542443312e244c8a2bab72c6a825f10d49e1e70a473098bc0496aae9d3e26b2d6d06a87788cbfc72ede22828909daa22f"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100002a00) 11:10:23 executing program 0: unshare(0x400003fa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:23 executing program 5: unshare(0x40006203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:23 executing program 1: unshare(0x40006001) 11:10:23 executing program 3: unshare(0x62000000) 11:10:23 executing program 2: unshare(0x4000fa00) 11:10:23 executing program 1: unshare(0x40006002) 11:10:23 executing program 0: unshare(0x400003fc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:23 executing program 5: unshare(0x40006401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:23 executing program 2: unshare(0x4000fa02) [ 694.367366][ T28] audit: type=1804 audit(1592565023.683:406): pid=9611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/547/cgroup.controllers" dev="sda1" ino=16242 res=1 [ 694.371085][ T9611] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:23 executing program 1: unshare(0x40006003) 11:10:23 executing program 0: unshare(0x400003fe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 694.433085][ T9632] IPVS: ftp: loaded support on port[0] = 21 [ 694.462376][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:10:24 executing program 4: unshare(0x400003ac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:24 executing program 2: unshare(0x4000fa03) 11:10:24 executing program 1: unshare(0x40006201) 11:10:24 executing program 5: unshare(0x40006402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:24 executing program 0: unshare(0x40000402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:24 executing program 3: unshare(0x74000000) 11:10:24 executing program 2: unshare(0x4000fc00) 11:10:24 executing program 1: unshare(0x40006202) 11:10:24 executing program 3: unshare(0xffff0300) 11:10:24 executing program 0: unshare(0x400004c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:24 executing program 5: unshare(0x40006403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:24 executing program 2: unshare(0x4000fc01) 11:10:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6}, 0x5) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100002a00) 11:10:24 executing program 1: unshare(0x40006203) 11:10:24 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') unshare(0x0) 11:10:24 executing program 1: unshare(0x40006401) 11:10:24 executing program 5: unshare(0x40006602) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:24 executing program 2: unshare(0x4000fc03) 11:10:25 executing program 0: unshare(0x40000500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:25 executing program 3: unshare(0x40000000) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f0000000300)={r3}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r3, 0x1, 0x1, 0x7}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e20, 0x8000, @mcast1, 0x8001}}, 0x7fff, 0x5}, &(0x7f0000000140)=0x90) 11:10:25 executing program 1: unshare(0x40006403) 11:10:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6}, 0x5) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100002a00) 11:10:25 executing program 2: unshare(0x4000fe03) 11:10:25 executing program 5: unshare(0x40006800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 695.890296][ T9758] IPVS: ftp: loaded support on port[0] = 21 [ 695.906376][ T9764] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:10:25 executing program 1: unshare(0x40006800) 11:10:25 executing program 0: unshare(0x40000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:25 executing program 2: unshare(0x4000fe80) [ 696.089416][ T28] audit: type=1804 audit(1592565025.413:407): pid=9781 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/550/cgroup.controllers" dev="sda1" ino=16381 res=1 11:10:25 executing program 1: unshare(0x40006801) 11:10:25 executing program 5: unshare(0x40006802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:25 executing program 2: unshare(0x4000fec0) [ 696.313175][ T9800] IPVS: ftp: loaded support on port[0] = 21 11:10:25 executing program 1: unshare(0x40006802) [ 696.432613][ T9814] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 696.443412][ T9758] IPVS: ftp: loaded support on port[0] = 21 [ 696.763715][ T9800] IPVS: ftp: loaded support on port[0] = 21 [ 697.843905][ T0] NOHZ: local_softirq_pending 08 11:10:27 executing program 5: unshare(0x40006c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:27 executing program 2: unshare(0x4000ff00) 11:10:27 executing program 1: unshare(0x40006a01) 11:10:27 executing program 4: unshare(0x40003203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:27 executing program 0: unshare(0x40000601) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b366cc4d9212ce9f9ca76bb860dfa4d3633892b8aad2d7d0bd971d4018be10320697d4c70710e2bdf3adfd160a22c831897e750abaebede00a72b394e40456df9fd827009efc057bba268186833e7f5249ebc5653c200ce8a89189a28aebb9f5a5ad25a0f7a80a8ed759829ef5723453fb2345386d028da58eb877215b5ef2507f150283db561a760f8698e93016403f2f3811dd99eda214e659fd35fff11eea8aa834647f1bc228456f1a2298d301466e254fea0ae522bb828d2aa908ef561163bd5480190a92", 0xc7}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1d00000100000001000000fd697ff0e8f70083148f64c92ca2532ba161bda5", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000987e8d9d73fd59acd1358c692ea13f06f6b7c583cfc3204783fd96283a145c0c55d10a86eb13f7f8afdaf4281e027ca6c84d08841d261ea20fa9ce10053afd02d6c3c87d14c4a803454d30a745d5347cab5a8ccac139459f8948b29b8bacdf684a3ea962a8ed8273279f6581ee79f769d8cc166e83a0816464c227a3c6e6ebd8820808610c6b39cb75e0fdb8a00f", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8], 0xa0, 0x20040000}], 0x1, 0x20040080) unshare(0x40000000) [ 698.485356][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:10:27 executing program 1: unshare(0x40006a03) 11:10:27 executing program 2: unshare(0x4000ff0f) 11:10:27 executing program 4: unshare(0x40000000) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f0000000300)={r3}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r3, 0x1, 0x1, 0x7}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e20, 0x8000, @mcast1, 0x8001}}, 0x7fff, 0x5}, &(0x7f0000000140)=0x90) [ 698.526612][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 698.559916][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 698.602862][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 698.645567][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:10:28 executing program 0: unshare(0x40000700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:28 executing program 5: unshare(0x40006c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:28 executing program 2: unshare(0x41000000) [ 698.701263][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 698.741609][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:10:28 executing program 1: unshare(0x40006c00) [ 698.771985][ T9909] IPVS: ftp: loaded support on port[0] = 21 [ 698.779989][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 698.791525][ T9910] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 698.808150][ T9889] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 698.895166][ T9889] IPVS: ftp: loaded support on port[0] = 21 11:10:28 executing program 2: unshare(0x62000000) 11:10:28 executing program 1: unshare(0x40006c01) 11:10:28 executing program 5: unshare(0x40006c03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:28 executing program 0: unshare(0x40000802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 699.235134][ T9968] IPVS: ftp: loaded support on port[0] = 21 [ 699.274766][ T9907] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 699.300157][ T9982] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:10:28 executing program 3: unshare(0x40000000) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x81000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 11:10:28 executing program 4: unshare(0x40003203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:28 executing program 1: unshare(0x40006c03) 11:10:28 executing program 5: unshare(0x40007200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:28 executing program 0: unshare(0x40000803) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:28 executing program 1: unshare(0x40006e03) [ 699.615539][T10020] IPVS: ftp: loaded support on port[0] = 21 11:10:29 executing program 5: unshare(0x40007202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:29 executing program 4: unshare(0x40007200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:29 executing program 2: unshare(0x6e000000) 11:10:29 executing program 1: unshare(0x40007003) 11:10:29 executing program 0: unshare(0x40000900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 700.015028][T10074] IPVS: ftp: loaded support on port[0] = 21 [ 700.054610][T10020] IPVS: ftp: loaded support on port[0] = 21 11:10:29 executing program 1: unshare(0x40007200) 11:10:32 executing program 3: unshare(0x62000000) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = accept4(r0, &(0x7f0000000000)=@pppol2tp, &(0x7f0000000080)=0x80, 0x800) sendmsg$AUDIT_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x400, 0x70bd27, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x811}, 0x20000801) 11:10:32 executing program 5: unshare(0x40007400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:32 executing program 4: unshare(0x62000000) 11:10:32 executing program 1: unshare(0x40007201) 11:10:32 executing program 0: unshare(0x40000a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:32 executing program 2: unshare(0x74000000) 11:10:32 executing program 1: unshare(0x40007202) [ 703.327172][T10140] IPVS: ftp: loaded support on port[0] = 21 11:10:32 executing program 2: unshare(0xffff0300) 11:10:32 executing program 0: unshare(0x40000a03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 703.476046][T10153] IPVS: ftp: loaded support on port[0] = 21 11:10:32 executing program 5: unshare(0x40007a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:32 executing program 1: unshare(0x40007400) 11:10:32 executing program 2: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x8}, &(0x7f00000000c0)=0x8) unshare(0x40000000) [ 703.824256][T10211] validate_nla: 10 callbacks suppressed [ 703.824266][T10211] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 703.881314][T10219] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 703.941746][T10219] IPVS: ftp: loaded support on port[0] = 21 11:10:33 executing program 3: unshare(0x2000000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x33, @local, 0x4e23, 0x2, 'wlc\x00', 0x4, 0x3, 0x16}, 0x2c) 11:10:33 executing program 1: unshare(0x40007402) 11:10:33 executing program 4: unshare(0x40007400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:33 executing program 5: unshare(0x40008002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:33 executing program 0: unshare(0x40000c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 704.147683][T10253] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 11:10:33 executing program 1: unshare(0x40007403) [ 704.195633][T10261] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 11:10:33 executing program 4: unshare(0x6e000000) 11:10:33 executing program 3: r0 = socket(0xb, 0xa, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000080)=0x2, 0x4) unshare(0x40000000) [ 704.285202][T10211] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 704.304868][T10219] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:10:33 executing program 5: unshare(0x40008200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:33 executing program 0: unshare(0x40000c02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:33 executing program 1: unshare(0x40007a00) [ 704.403871][T10276] IPVS: ftp: loaded support on port[0] = 21 [ 704.497971][T10282] IPVS: ftp: loaded support on port[0] = 21 [ 704.526470][T10284] IPVS: ftp: loaded support on port[0] = 21 [ 704.911875][T10358] IPVS: ftp: loaded support on port[0] = 21 11:10:36 executing program 0: unshare(0x40000c03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:36 executing program 1: unshare(0x40007a02) 11:10:36 executing program 5: unshare(0x40008203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b366cc4d9212ce9f9ca76bb860dfa4d3633892b8aad2d7d0bd971d4018be10320697d4c70710e2bdf3adfd160a22c831897e750abaebede00a72b394e40456df9fd827009efc057bba268186833e7f5249ebc5653c200ce8a89189a28aebb9f5a5ad25a0f7a80a8ed759829ef5723453fb2345386d028da58eb877215b5ef2507f150283db561a760f8698e93016403f2f3811dd99eda214e659fd35fff11eea8aa834647f1bc228456f1a2298d301466e254fea0ae522bb828d2aa908ef561163bd5480190a92", 0xc7}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1d00000100000001000000fd697ff0e8f70083148f64c92ca2532ba161bda5", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000987e8d9d73fd59acd1358c692ea13f06f6b7c583cfc3204783fd96283a145c0c55d10a86eb13f7f8afdaf4281e027ca6c84d08841d261ea20fa9ce10053afd02d6c3c87d14c4a803454d30a745d5347cab5a8ccac139459f8948b29b8bacdf684a3ea962a8ed8273279f6581ee79f769d8cc166e83a0816464c227a3c6e6ebd8820808610c6b39cb75e0fdb8a00f", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8], 0xa0, 0x20040000}], 0x1, 0x20040080) unshare(0x40000000) 11:10:36 executing program 2: unshare(0x40000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002c80)={r1}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x5, r1}, 0x8) 11:10:36 executing program 1: unshare(0x40007c00) [ 707.292453][T10416] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:36 executing program 5: unshare(0x40008403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 707.380906][T10416] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 707.406076][T10427] IPVS: ftp: loaded support on port[0] = 21 [ 707.412361][T10416] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 11:10:36 executing program 0: unshare(0x40000e03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 707.457274][T10426] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 707.474824][T10426] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 707.512418][T10416] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 707.607616][T10416] IPVS: ftp: loaded support on port[0] = 21 [ 707.890828][T10427] IPVS: ftp: loaded support on port[0] = 21 11:10:37 executing program 3: unshare(0x40000000) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, '\x00', {'vlan1\x00'}, 0x4863}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYRES16=r2], &(0x7f0000000080)=0x4) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) sendto$rxrpc(r3, &(0x7f00000000c0)="0bb75289de86f746c7fb95fc58508698b309ddb6f28fe02a5c290ded9c2d9b3ce99be92348a5995015efc05224f3e21cadfd47e1c41dc01c0fd11a88047b951d5edeb6d8d6558d0c2d882e83602baa9a0866b50887a77ae0eb721e81f7386e6522d2d310a7b1e4413937d0a13aa31472b6af00f6f4bc8e02da0a98abe8f40c7a6892b312afb1570f0fdbfa155be2edb66a9c83708e00cabb92a277777d1304e5dd6a46b81d39e8dfc3688af358ca383bed4716b92d1abe912f8debd8884f09d6d5762cf71f11bfe67f0dd67ff5c1dab3fc8e655a7a5afe161361d57814ae31fa1aaca197", 0xe4, 0x0, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) 11:10:37 executing program 0: unshare(0x40001100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:37 executing program 1: unshare(0x40007c02) 11:10:37 executing program 5: unshare(0x40008602) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b000500010007"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x8, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000200)=""/124, 0x7c}, &(0x7f0000000100), 0x30}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100002a00) 11:10:37 executing program 1: unshare(0x40007c03) [ 708.409767][T10511] IPVS: ftp: loaded support on port[0] = 21 11:10:37 executing program 5: unshare(0x40008800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:37 executing program 0: unshare(0x40001200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 708.516928][ T28] audit: type=1804 audit(1592565037.834:408): pid=10503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/559/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 708.526939][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 708.820034][T10511] IPVS: ftp: loaded support on port[0] = 21 [ 708.835756][T10555] validate_nla: 6 callbacks suppressed [ 708.835767][T10555] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 708.896137][T10563] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 708.935448][T10516] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 11:10:39 executing program 2: unshare(0x40000000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x5, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@multicast, @empty, @broadcast, 0x8, 0x1}}}, {{@arp={@empty, @rand_addr=0x64010101, 0x0, 0xff000000, 0x2, 0xc, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={[], 0x28}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6194, 0x101, 0xbf, 0x7ff, 0x3f, 0x50e0, 'gretap0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x105}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @multicast2, @remote, 0xe, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) 11:10:39 executing program 5: unshare(0x40008a03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:39 executing program 1: unshare(0x40007e00) 11:10:39 executing program 0: unshare(0x40001203) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:39 executing program 4: r0 = socket(0xb, 0xa, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000080)=0x2, 0x4) unshare(0x40000000) 11:10:39 executing program 3: unshare(0x40000000) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@netrom={'nr', 0x0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$inet6_dccp_int(r2, 0x21, 0xa, &(0x7f0000000000)=0x3, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0xfffffffffffffd3b) 11:10:39 executing program 1: unshare(0x40008200) [ 710.548636][T10597] IPVS: ftp: loaded support on port[0] = 21 [ 710.573818][T10600] IPVS: ftp: loaded support on port[0] = 21 [ 710.574653][T10606] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 710.648180][T10606] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 710.694171][T10610] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 710.711196][T10620] x_tables: duplicate underflow at hook 1 11:10:40 executing program 5: unshare(0x40008c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 710.756849][T10613] IPVS: ftp: loaded support on port[0] = 21 11:10:40 executing program 1: unshare(0x40008203) 11:10:40 executing program 0: unshare(0x40001400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:40 executing program 5: unshare(0x40008e00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:40 executing program 1: unshare(0x40008403) [ 711.119530][T10597] IPVS: ftp: loaded support on port[0] = 21 [ 711.125678][T10610] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 711.155842][T10610] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 711.209373][T10704] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 711.253113][T10613] IPVS: ftp: loaded support on port[0] = 21 [ 711.288217][T10714] x_tables: duplicate underflow at hook 1 11:10:42 executing program 2: unshare(0x0) 11:10:42 executing program 0: unshare(0x40001401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:42 executing program 4: unshare(0x40000344) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:42 executing program 1: unshare(0x40008800) 11:10:42 executing program 5: unshare(0x40008e03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:42 executing program 3: unshare(0x40000000) r0 = socket(0x18, 0x4, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x8001, 0x4) 11:10:42 executing program 1: unshare(0x40008a00) [ 712.968463][T10747] IPVS: ftp: loaded support on port[0] = 21 11:10:42 executing program 2: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@ax25={{0x3, @rose}, [@bcast, @rose, @null, @bcast, @remote, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000000c0)=""/237, 0xed}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/41, 0x29}], 0x6, &(0x7f00000004c0)=""/244, 0xf4}, 0x2122) unshare(0x40000000) 11:10:42 executing program 4: unshare(0x40000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:42 executing program 0: unshare(0x40001403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:42 executing program 5: unshare(0x40009003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 713.207116][T10779] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:10:42 executing program 1: unshare(0x40008a03) [ 713.303364][T10779] IPVS: ftp: loaded support on port[0] = 21 [ 713.313113][T10787] IPVS: ftp: loaded support on port[0] = 21 [ 713.454306][T10747] IPVS: ftp: loaded support on port[0] = 21 11:10:42 executing program 5: unshare(0x40009403) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:42 executing program 1: unshare(0x40008c00) 11:10:42 executing program 0: unshare(0x40001600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:43 executing program 1: unshare(0x40008c01) [ 713.872542][T10779] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:10:43 executing program 5: unshare(0x40009603) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:44 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'batadv_slave_1\x00', {0x6}, 0x5}) unshare(0x40000000) 11:10:44 executing program 1: unshare(0x40008c02) 11:10:44 executing program 0: unshare(0x40001a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000004060102000080000000000010000b0005000100079256b70ed195d22a5e33f50558dbf4ab469ca40e12cf23dff81c1dcf36d97a953e8039cf308d79742dbe5c7e"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002a00) 11:10:44 executing program 2: unshare(0x40000000) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, &(0x7f0000000040)={r0}) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x81000) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000000000000008001b00013d0000", 0x24) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30f26839ed99d37b54ac5e60b723d17e2e9136d3b3e7fd91ede0c3be2ab01073f9366855f20939c1d3dfb0d8172e", @ANYRES16=r5, @ANYBLOB="020029bd7000fddbdf2508000000050005000000000008000c00020000000500040006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000280)=0xc9af, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000000)="a81b112eee774927a9a06665b837ec13c209b02ed950c6e42d36b5916b33b8566b0d47fa7687457c1233dced25e1b5b647e5a18a88d16e6ac7428b969883656301c85756b07cbe8a6136917717e89c7fa99fc8b7fc9c10406f0d2a591fce3615eaa78a46b6a062c81c4b3dc9a3fed823bf206049bdf68be906a418be386130277915ad653e32faa3e5e8ce4edafa512f1e576411aa7e512a9a4a89c6f1156ff131c78168bb95e7b0f230d747e1558d4beb836228", &(0x7f00000000c0), &(0x7f0000000100)="a089b4354d038a94e1cbff7afa985fe0c5585d60ac6d4c25dec8aa9a1b0e5078bd31e03b9073042f56", &(0x7f0000000140)="504da0d8", 0xfffff000, r1}, 0x38) 11:10:44 executing program 5: unshare(0x40009803) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:45 executing program 1: unshare(0x40008c03) [ 715.772917][T10916] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 715.783043][T10911] IPVS: ftp: loaded support on port[0] = 21 [ 715.840730][T10926] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 715.841203][T10916] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 715.887855][T10925] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:10:45 executing program 0: unshare(0x40001a03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:45 executing program 5: unshare(0x40009a02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:10:45 executing program 1: unshare(0x40008e00) [ 715.935708][T10916] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 715.991073][ T28] audit: type=1804 audit(1592565045.315:409): pid=10912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223159975/syzkaller.jm6GAW/563/cgroup.controllers" dev="sda1" ino=16373 res=1 11:10:45 executing program 1: unshare(0x40008e03) [ 716.237812][T10925] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 716.259448][T10916] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 716.271464][T10925] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 11:10:45 executing program 5: unshare(0x40009c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 716.291508][T10938] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 718.319920][ T0] NOHZ: local_softirq_pending 08 [ 766.955952][ T0] NOHZ: local_softirq_pending 08 [ 791.212923][ T220] tipc: TX() has been purged, node left! [ 791.382877][ T220] tipc: TX() has been purged, node left! [ 791.542856][ T220] tipc: TX() has been purged, node left! [ 791.722898][ T220] tipc: TX() has been purged, node left! [ 791.913008][ T220] tipc: TX() has been purged, node left! [ 792.083227][ T220] tipc: TX() has been purged, node left! [ 792.252894][ T220] tipc: TX() has been purged, node left! [ 792.413064][ T220] tipc: TX() has been purged, node left! [ 792.642748][ T220] tipc: TX() has been purged, node left! [ 792.812841][ T220] tipc: TX() has been purged, node left! [ 792.972712][ T220] tipc: TX() has been purged, node left! [ 793.132669][ T220] tipc: TX() has been purged, node left! [ 793.302692][ T220] tipc: TX() has been purged, node left! [ 793.482715][ T220] tipc: TX() has been purged, node left! [ 793.642745][ T220] tipc: TX() has been purged, node left! [ 793.833225][ T220] tipc: TX() has been purged, node left! [ 794.002946][ T220] tipc: TX() has been purged, node left! [ 794.182739][ T220] tipc: TX() has been purged, node left! [ 794.342672][ T220] tipc: TX() has been purged, node left! [ 794.502706][ T220] tipc: TX() has been purged, node left! [ 794.662680][ T220] tipc: TX() has been purged, node left! [ 794.852682][ T220] tipc: TX() has been purged, node left! [ 795.042667][ T220] tipc: TX() has been purged, node left! [ 795.202704][ T220] tipc: TX() has been purged, node left! [ 795.372656][ T220] tipc: TX() has been purged, node left! [ 795.532562][ T220] tipc: TX() has been purged, node left! [ 795.702603][ T220] tipc: TX() has been purged, node left! [ 795.862516][ T220] tipc: TX() has been purged, node left! [ 796.052730][ T220] tipc: TX() has been purged, node left! [ 796.222567][ T220] tipc: TX() has been purged, node left! [ 796.383589][ T220] tipc: TX() has been purged, node left! [ 796.542577][ T220] tipc: TX() has been purged, node left! [ 796.702541][ T220] tipc: TX() has been purged, node left! [ 796.873217][ T220] tipc: TX() has been purged, node left! [ 797.032498][ T220] tipc: TX() has been purged, node left! [ 797.222563][ T220] tipc: TX() has been purged, node left! [ 797.422478][ T220] tipc: TX() has been purged, node left! [ 797.592701][ T220] tipc: TX() has been purged, node left! [ 797.753498][ T220] tipc: TX() has been purged, node left! [ 797.932500][ T220] tipc: TX() has been purged, node left! [ 798.092394][ T220] tipc: TX() has been purged, node left! [ 798.262435][ T220] tipc: TX() has been purged, node left! [ 798.442388][ T220] tipc: TX() has been purged, node left! [ 798.612451][ T220] tipc: TX() has been purged, node left! [ 798.772404][ T220] tipc: TX() has been purged, node left! [ 798.952569][ T220] tipc: TX() has been purged, node left! [ 799.142321][ T220] tipc: TX() has been purged, node left! [ 799.303169][ T220] tipc: TX() has been purged, node left! [ 799.462308][ T220] tipc: TX() has been purged, node left! [ 799.642363][ T220] tipc: TX() has been purged, node left! [ 799.802334][ T220] tipc: TX() has been purged, node left! [ 799.972378][ T220] tipc: TX() has been purged, node left! [ 800.142321][ T220] tipc: TX() has been purged, node left! [ 800.332263][ T220] tipc: TX() has been purged, node left! [ 800.502314][ T220] tipc: TX() has been purged, node left! [ 800.692377][ T220] tipc: TX() has been purged, node left! [ 800.872655][ T220] tipc: TX() has been purged, node left! [ 801.052377][ T220] tipc: TX() has been purged, node left! [ 801.236775][ T220] tipc: TX() has been purged, node left! [ 801.402213][ T220] tipc: TX() has been purged, node left! [ 801.582210][ T220] tipc: TX() has been purged, node left! [ 801.742243][ T220] tipc: TX() has been purged, node left! [ 801.912193][ T220] tipc: TX() has been purged, node left! [ 802.072394][ T220] tipc: TX() has been purged, node left! [ 802.232303][ T220] tipc: TX() has been purged, node left! [ 802.392256][ T220] tipc: TX() has been purged, node left! [ 802.552252][ T220] tipc: TX() has been purged, node left! [ 802.732219][ T220] tipc: TX() has been purged, node left! [ 802.892186][ T220] tipc: TX() has been purged, node left! [ 803.072129][ T220] tipc: TX() has been purged, node left! [ 803.242170][ T220] tipc: TX() has been purged, node left! [ 803.422117][ T220] tipc: TX() has been purged, node left! [ 803.612126][ T220] tipc: TX() has been purged, node left! [ 803.792099][ T220] tipc: TX() has been purged, node left! [ 803.952125][ T220] tipc: TX() has been purged, node left! [ 804.112080][ T220] tipc: TX() has been purged, node left! [ 804.272108][ T220] tipc: TX() has been purged, node left! [ 804.452107][ T220] tipc: TX() has been purged, node left! [ 804.652137][ T220] tipc: TX() has been purged, node left! [ 804.822090][ T220] tipc: TX() has been purged, node left! [ 804.991985][ T220] tipc: TX() has been purged, node left! [ 805.162005][ T220] tipc: TX() has been purged, node left! [ 805.341984][ T220] tipc: TX() has been purged, node left! [ 805.501994][ T220] tipc: TX() has been purged, node left! [ 805.681968][ T220] tipc: TX() has been purged, node left! [ 805.842070][ T220] tipc: TX() has been purged, node left! [ 806.002039][ T220] tipc: TX() has been purged, node left! [ 806.181957][ T220] tipc: TX() has been purged, node left! [ 806.361948][ T220] tipc: TX() has been purged, node left! [ 806.521921][ T220] tipc: TX() has been purged, node left! [ 806.691975][ T220] tipc: TX() has been purged, node left! [ 806.851912][ T220] tipc: TX() has been purged, node left! [ 807.032031][ T220] tipc: TX() has been purged, node left! [ 807.201988][ T220] tipc: TX() has been purged, node left! [ 807.371906][ T220] tipc: TX() has been purged, node left! [ 807.551992][ T220] tipc: TX() has been purged, node left! [ 807.731930][ T220] tipc: TX() has been purged, node left! [ 807.891915][ T220] tipc: TX() has been purged, node left! [ 808.061966][ T220] tipc: TX() has been purged, node left! [ 808.221817][ T220] tipc: TX() has been purged, node left! [ 808.381772][ T220] tipc: TX() has been purged, node left! [ 808.541744][ T220] tipc: TX() has been purged, node left! [ 808.560744][ T0] NOHZ: local_softirq_pending 08 [ 808.741847][ T220] tipc: TX() has been purged, node left! [ 808.911846][ T220] tipc: TX() has been purged, node left! [ 809.071818][ T220] tipc: TX() has been purged, node left! [ 809.281858][ T220] tipc: TX() has been purged, node left! [ 809.471811][ T220] tipc: TX() has been purged, node left! [ 809.641852][ T220] tipc: TX() has been purged, node left! [ 809.811808][ T220] tipc: TX() has been purged, node left! [ 809.981791][ T220] tipc: TX() has been purged, node left! [ 810.171696][ T220] tipc: TX() has been purged, node left! [ 810.351799][ T220] tipc: TX() has been purged, node left! [ 810.531679][ T220] tipc: TX() has been purged, node left! [ 810.691763][ T220] tipc: TX() has been purged, node left! [ 810.851672][ T220] tipc: TX() has been purged, node left! [ 811.031804][ T220] tipc: TX() has been purged, node left! [ 811.191790][ T220] tipc: TX() has been purged, node left! [ 811.361694][ T220] tipc: TX() has been purged, node left! [ 811.561704][ T220] tipc: TX() has been purged, node left! [ 811.752246][ T220] tipc: TX() has been purged, node left! [ 811.921701][ T220] tipc: TX() has been purged, node left! [ 812.081688][ T220] tipc: TX() has been purged, node left! [ 812.261694][ T220] tipc: TX() has been purged, node left! [ 812.441702][ T220] tipc: TX() has been purged, node left! [ 812.621544][ T220] tipc: TX() has been purged, node left! [ 812.801647][ T220] tipc: TX() has been purged, node left! [ 812.971552][ T220] tipc: TX() has been purged, node left! [ 813.141627][ T220] tipc: TX() has been purged, node left! [ 813.331560][ T220] tipc: TX() has been purged, node left! [ 813.531508][ T220] tipc: TX() has been purged, node left! [ 813.691482][ T220] tipc: TX() has been purged, node left! [ 813.861562][ T220] tipc: TX() has been purged, node left! [ 814.031452][ T220] tipc: TX() has been purged, node left! [ 814.221540][ T220] tipc: TX() has been purged, node left! [ 814.431549][ T220] tipc: TX() has been purged, node left! [ 814.611497][ T220] tipc: TX() has been purged, node left! [ 814.781500][ T220] tipc: TX() has been purged, node left! [ 814.941511][ T220] tipc: TX() has been purged, node left! [ 815.101529][ T220] tipc: TX() has been purged, node left! [ 815.261397][ T220] tipc: TX() has been purged, node left! [ 815.431781][ T220] tipc: TX() has been purged, node left! [ 815.611474][ T220] tipc: TX() has been purged, node left! [ 815.785930][ T220] tipc: TX() has been purged, node left! [ 816.011410][ T220] tipc: TX() has been purged, node left! [ 816.191403][ T220] tipc: TX() has been purged, node left! [ 816.361388][ T220] tipc: TX() has been purged, node left! [ 816.551467][ T220] tipc: TX() has been purged, node left! [ 816.731511][ T220] tipc: TX() has been purged, node left! [ 816.931326][ T220] tipc: TX() has been purged, node left! [ 817.101406][ T220] tipc: TX() has been purged, node left! [ 817.291261][ T220] tipc: TX() has been purged, node left! [ 817.461441][ T220] tipc: TX() has been purged, node left! [ 817.641369][ T220] tipc: TX() has been purged, node left! [ 817.841259][ T220] tipc: TX() has been purged, node left! [ 818.011239][ T220] tipc: TX() has been purged, node left! [ 818.181280][ T220] tipc: TX() has been purged, node left! [ 818.341259][ T220] tipc: TX() has been purged, node left! [ 818.501299][ T220] tipc: TX() has been purged, node left! [ 818.671225][ T220] tipc: TX() has been purged, node left! [ 818.841282][ T220] tipc: TX() has been purged, node left! [ 819.001292][ T220] tipc: TX() has been purged, node left! [ 819.171233][ T220] tipc: TX() has been purged, node left! [ 819.341174][ T220] tipc: TX() has been purged, node left! [ 819.531200][ T220] tipc: TX() has been purged, node left! [ 819.711186][ T220] tipc: TX() has been purged, node left! [ 819.911304][ T220] tipc: TX() has been purged, node left! [ 820.095557][ T220] tipc: TX() has been purged, node left! [ 820.271188][ T220] tipc: TX() has been purged, node left! [ 820.441175][ T220] tipc: TX() has been purged, node left! [ 820.611167][ T220] tipc: TX() has been purged, node left! [ 820.781167][ T220] tipc: TX() has been purged, node left! [ 820.959849][ T220] tipc: TX() has been purged, node left! [ 821.141065][ T220] tipc: TX() has been purged, node left! [ 821.311087][ T220] tipc: TX() has been purged, node left! [ 821.491137][ T220] tipc: TX() has been purged, node left! [ 821.662035][ T220] tipc: TX() has been purged, node left! [ 821.821066][ T220] tipc: TX() has been purged, node left! [ 822.000568][ T220] tipc: TX() has been purged, node left! [ 822.181036][ T220] tipc: TX() has been purged, node left! [ 822.365598][ T220] tipc: TX() has been purged, node left! [ 822.541028][ T220] tipc: TX() has been purged, node left! [ 822.720975][ T220] tipc: TX() has been purged, node left! [ 822.911014][ T220] tipc: TX() has been purged, node left! [ 823.080949][ T220] tipc: TX() has been purged, node left! [ 823.250999][ T220] tipc: TX() has been purged, node left! [ 823.431297][ T220] tipc: TX() has been purged, node left! [ 823.610934][ T220] tipc: TX() has been purged, node left! [ 823.841012][ T220] tipc: TX() has been purged, node left! [ 824.040982][ T220] tipc: TX() has been purged, node left! [ 824.240876][ T220] tipc: TX() has been purged, node left! [ 824.430943][ T220] tipc: TX() has been purged, node left! [ 824.611014][ T220] tipc: TX() has been purged, node left! [ 824.790926][ T220] tipc: TX() has been purged, node left! [ 824.970938][ T220] tipc: TX() has been purged, node left! [ 825.130955][ T220] tipc: TX() has been purged, node left! [ 825.330834][ T220] tipc: TX() has been purged, node left! [ 825.520970][ T220] tipc: TX() has been purged, node left! [ 825.680936][ T220] tipc: TX() has been purged, node left! [ 825.840879][ T220] tipc: TX() has been purged, node left! [ 826.000785][ T220] tipc: TX() has been purged, node left! [ 826.180883][ T220] tipc: TX() has been purged, node left! [ 826.370813][ T220] tipc: TX() has been purged, node left! [ 826.561164][ T220] tipc: TX() has been purged, node left! [ 826.721086][ T220] tipc: TX() has been purged, node left! [ 826.880891][ T220] tipc: TX() has been purged, node left! [ 827.060769][ T220] tipc: TX() has been purged, node left! [ 827.240708][ T220] tipc: TX() has been purged, node left! [ 827.410728][ T220] tipc: TX() has been purged, node left! [ 827.580711][ T220] tipc: TX() has been purged, node left! [ 827.740747][ T220] tipc: TX() has been purged, node left! [ 827.920696][ T220] tipc: TX() has been purged, node left! [ 828.090684][ T220] tipc: TX() has been purged, node left! [ 828.270716][ T220] tipc: TX() has been purged, node left! [ 828.430690][ T220] tipc: TX() has been purged, node left! [ 828.630904][ T220] tipc: TX() has been purged, node left! [ 828.790848][ T220] tipc: TX() has been purged, node left! [ 828.960611][ T220] tipc: TX() has been purged, node left! [ 829.130667][ T220] tipc: TX() has been purged, node left! [ 829.330647][ T220] tipc: TX() has been purged, node left! [ 829.520696][ T220] tipc: TX() has been purged, node left! [ 829.691605][ T220] tipc: TX() has been purged, node left! [ 829.855011][ T220] tipc: TX() has been purged, node left! [ 830.030566][ T220] tipc: TX() has been purged, node left! [ 830.200645][ T220] tipc: TX() has been purged, node left! [ 830.360545][ T220] tipc: TX() has been purged, node left! [ 830.530594][ T220] tipc: TX() has been purged, node left! [ 830.690663][ T220] tipc: TX() has been purged, node left! [ 830.870848][ T220] tipc: TX() has been purged, node left! [ 831.050553][ T220] tipc: TX() has been purged, node left! [ 831.230482][ T220] tipc: TX() has been purged, node left! [ 831.400734][ T220] tipc: TX() has been purged, node left! [ 831.570489][ T220] tipc: TX() has been purged, node left! [ 831.730526][ T220] tipc: TX() has been purged, node left! [ 831.890449][ T220] tipc: TX() has been purged, node left! [ 832.060456][ T220] tipc: TX() has been purged, node left! [ 832.230719][ T220] tipc: TX() has been purged, node left! [ 832.414936][ T220] tipc: TX() has been purged, node left! [ 832.580464][ T220] tipc: TX() has been purged, node left! [ 832.760405][ T220] tipc: TX() has been purged, node left! [ 832.960588][ T220] tipc: TX() has been purged, node left! [ 833.140370][ T220] tipc: TX() has been purged, node left! [ 833.310489][ T220] tipc: TX() has been purged, node left! [ 833.540357][ T220] tipc: TX() has been purged, node left! [ 833.710412][ T220] tipc: TX() has been purged, node left! [ 848.873398][ T0] NOHZ: local_softirq_pending 08 [ 852.070130][ T0] NOHZ: local_softirq_pending 08 [ 910.309544][ T0] NOHZ: local_softirq_pending 08 [ 930.797577][ T0] NOHZ: local_softirq_pending 08 [ 933.986105][ T0] NOHZ: local_softirq_pending 08 [ 944.224811][ T1127] INFO: task syz-executor.3:10931 blocked for more than 143 seconds. [ 944.232944][ T1127] Not tainted 5.7.0-syzkaller #0 [ 944.240616][ T1127] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.258545][ T1127] syz-executor.3 D26160 10931 7134 0x80004006 [ 944.267637][ T1127] Call Trace: [ 944.270958][ T1127] __schedule+0x8f3/0x1f90 [ 944.276152][ T1127] ? rwsem_down_write_slowpath+0x90a/0xf90 [ 944.281965][ T1127] ? __sched_text_start+0x8/0x8 [ 944.287822][ T1127] ? _raw_spin_unlock_irq+0x1f/0x80 [ 944.293086][ T1127] schedule+0xd0/0x2a0 [ 944.297981][ T1127] rwsem_down_write_slowpath+0x706/0xf90 [ 944.303618][ T1127] ? rwsem_mark_wake+0x8d0/0x8d0 [ 944.310209][ T1127] ? lock_acquire+0x1f2/0x8f0 [ 944.315572][ T1127] ? unregister_netdevice_notifier+0x1e/0x170 [ 944.321779][ T1127] ? down_write+0x137/0x150 [ 944.327281][ T1127] down_write+0x137/0x150 [ 944.331633][ T1127] ? __down_timeout+0x2d0/0x2d0 [ 944.337287][ T1127] unregister_netdevice_notifier+0x1e/0x170 [ 944.343282][ T1127] bcm_release+0x8b/0x660 [ 944.348676][ T1127] ? __sock_release+0x280/0x280 [ 944.353557][ T1127] __sock_release+0xcd/0x280 [ 944.358982][ T1127] sock_close+0x18/0x20 [ 944.363137][ T1127] __fput+0x33e/0x880 [ 944.370385][ T1127] task_work_run+0xf4/0x1b0 [ 944.375549][ T1127] do_exit+0xb3f/0x2de0 [ 944.379722][ T1127] ? find_held_lock+0x2d/0x110 [ 944.385520][ T1127] ? mm_update_next_owner+0x7a0/0x7a0 [ 944.390907][ T1127] ? lock_downgrade+0x840/0x840 [ 944.396824][ T1127] do_group_exit+0x125/0x340 [ 944.401482][ T1127] get_signal+0x47b/0x24e0 [ 944.407073][ T1127] ? find_held_lock+0x2d/0x110 [ 944.412043][ T1127] do_signal+0x81/0x2240 [ 944.417447][ T1127] ? lock_downgrade+0x840/0x840 [ 944.422515][ T1127] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 944.429501][ T1127] ? copy_siginfo_to_user32+0xa0/0xa0 [ 944.436448][ T1127] ? __fd_install+0x1e6/0x600 [ 944.441142][ T1127] ? __sys_socket+0x16d/0x200 [ 944.446843][ T1127] ? exit_to_usermode_loop+0x36/0x360 [ 944.452234][ T1127] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 944.459009][ T1127] exit_to_usermode_loop+0x26c/0x360 [ 944.465120][ T1127] do_syscall_64+0x6b1/0x7d0 [ 944.469726][ T1127] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 944.479212][ T1127] RIP: 0033:0x45ca59 [ 944.483124][ T1127] Code: Bad RIP value. [ 944.488095][ T1127] RSP: 002b:00007fd86ba7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 944.497358][ T1127] RAX: 0000000000000004 RBX: 00000000005078e0 RCX: 000000000045ca59 [ 944.505877][ T1127] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 944.513843][ T1127] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 944.522553][ T1127] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 944.531094][ T1127] R13: 0000000000000b99 R14: 00000000004cdf85 R15: 00007fd86ba7c6d4 [ 944.539901][ T1127] [ 944.539901][ T1127] Showing all locks held in the system: [ 944.548395][ T1127] 2 locks held by kworker/u4:3/117: [ 944.553593][ T1127] #0: ffff8880ae737d58 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x233/0x1f90 [ 944.563146][ T1127] #1: ffff8880ae722ec8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x304/0x410 [ 944.575633][ T1127] 3 locks held by kworker/u4:5/220: [ 944.580825][ T1127] #0: ffff88821b039138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x844/0x16a0 [ 944.594610][ T1127] #1: ffffc90001917dc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x878/0x16a0 [ 944.605143][ T1127] #2: ffffffff8a586130 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xa50 [ 944.614550][ T1127] 1 lock held by khungtaskd/1127: [ 944.619562][ T1127] #0: ffffffff899be040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 944.630414][ T1127] 1 lock held by in:imklog/6525: [ 944.635474][ T1127] 2 locks held by syz-executor.3/10931: [ 944.641007][ T1127] #0: ffff8880505cbc90 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 944.651604][ T1127] #1: ffffffff8a586130 (pernet_ops_rwsem){++++}-{3:3}, at: unregister_netdevice_notifier+0x1e/0x170 [ 944.662666][ T1127] [ 944.670671][ T1127] ============================================= [ 944.670671][ T1127] [ 944.683226][ T1127] NMI backtrace for cpu 0 [ 944.687680][ T1127] CPU: 0 PID: 1127 Comm: khungtaskd Not tainted 5.7.0-syzkaller #0 [ 944.695574][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.705626][ T1127] Call Trace: [ 944.708926][ T1127] dump_stack+0x188/0x20d [ 944.713296][ T1127] nmi_cpu_backtrace.cold+0x70/0xb1 [ 944.718497][ T1127] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 944.724143][ T1127] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 944.730186][ T1127] watchdog+0xa8c/0x1010 [ 944.734427][ T1127] ? reset_hung_task_detector+0x30/0x30 [ 944.739990][ T1127] kthread+0x388/0x470 [ 944.744051][ T1127] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 944.749815][ T1127] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 944.755518][ T1127] ret_from_fork+0x24/0x30 [ 944.760374][ T1127] Sending NMI from CPU 0 to CPUs 1: [ 944.766252][ C1] NMI backtrace for cpu 1 [ 944.766258][ C1] CPU: 1 PID: 11225 Comm: kworker/1:53 Not tainted 5.7.0-syzkaller #0 [ 944.766264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.766268][ C1] Workqueue: events nsim_dev_trap_report_work [ 944.766275][ C1] RIP: 0010:chacha_permute+0x511/0x6e0 [ 944.766285][ C1] Code: 31 fc c1 c1 0c 41 c1 c4 10 44 01 ea 41 01 ef 89 54 24 1c 33 54 24 08 45 01 e6 45 31 f9 44 31 f0 41 c1 c1 0c c1 c0 0c 45 01 cb <01> cb 44 31 dd 31 de 44 89 5c 24 14 c1 c2 0c c1 c6 08 41 01 d0 c1 [ 944.766289][ C1] RSP: 0018:ffffc900178ef9e8 EFLAGS: 00000016 [ 944.766296][ C1] RAX: 0000000000c4041e RBX: 0000000018da8b97 RCX: 00000000bc691e40 [ 944.766301][ C1] RDX: 00000000b53b168a RSI: 000000003e9633ce RDI: 000000006c1c8624 [ 944.766305][ C1] RBP: 00000000d92d062f R08: 000000004748eddd R09: 000000000c313eb8 [ 944.766310][ C1] R10: 00000000958b8f92 R11: 000000002b1a09b2 R12: 000000004d248c7b [ 944.766315][ C1] R13: 00000000a89289df R14: 00000000bd04c895 R15: 00000000f9fdc1ce [ 944.766320][ C1] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 944.766324][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.766329][ C1] CR2: 00007fb550654000 CR3: 0000000093624000 CR4: 00000000001406e0 [ 944.766334][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 944.766338][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 944.766341][ C1] Call Trace: [ 944.766345][ C1] chacha_block_generic+0x97/0x200 [ 944.766348][ C1] ? print_usage_bug+0x240/0x240 [ 944.766351][ C1] ? chacha_permute+0x6e0/0x6e0 [ 944.766355][ C1] ? do_raw_spin_lock+0x129/0x2e0 [ 944.766359][ C1] ? nsim_dev_trap_report_work+0x311/0xbc0 [ 944.766362][ C1] _extract_crng+0x132/0x260 [ 944.766366][ C1] ? nsim_dev_trap_report_work+0x397/0xbc0 [ 944.766369][ C1] _get_random_bytes+0x16a/0x420 [ 944.766373][ C1] ? crng_backtrack_protect+0x80/0x80 [ 944.766376][ C1] ? kmem_cache_free+0x240/0x320 [ 944.766379][ C1] ? kfree_skbmem+0xef/0x1b0 [ 944.766383][ C1] ? _warn_unseeded_randomness+0x24/0xc0 [ 944.766387][ C1] nsim_dev_trap_report_work+0x397/0xbc0 [ 944.766391][ C1] process_one_work+0x965/0x16a0 [ 944.766394][ C1] ? lock_release+0x800/0x800 [ 944.766398][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 944.766401][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 944.766404][ C1] worker_thread+0x96/0xe20 [ 944.766408][ C1] ? process_one_work+0x16a0/0x16a0 [ 944.766411][ C1] kthread+0x388/0x470 [ 944.766414][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 944.766418][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 944.766421][ C1] ret_from_fork+0x24/0x30 [ 944.772164][ T1127] Kernel panic - not syncing: hung_task: blocked tasks [ 945.031831][ T1127] CPU: 0 PID: 1127 Comm: khungtaskd Not tainted 5.7.0-syzkaller #0 [ 945.039720][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.049756][ T1127] Call Trace: [ 945.053036][ T1127] dump_stack+0x188/0x20d [ 945.057350][ T1127] panic+0x2e3/0x75c [ 945.061242][ T1127] ? add_taint.cold+0x16/0x16 [ 945.065904][ T1127] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 945.071517][ T1127] ? preempt_schedule_thunk+0x16/0x18 [ 945.076890][ T1127] ? watchdog+0xa8c/0x1010 [ 945.081305][ T1127] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 945.087443][ T1127] watchdog+0xa9d/0x1010 [ 945.091671][ T1127] ? reset_hung_task_detector+0x30/0x30 [ 945.097199][ T1127] kthread+0x388/0x470 [ 945.101247][ T1127] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 945.106948][ T1127] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 945.112654][ T1127] ret_from_fork+0x24/0x30 [ 945.119046][ T1127] Kernel Offset: disabled [ 945.123377][ T1127] Rebooting in 86400 seconds..