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", 0x1000}, {&(0x7f00000033c0)="9c14a4345d2f70965871e6ab05535efdc24052ec0668ff743c710971c6fa56297d21b2e6d66efb2f3da8c7912d0c89a2921a952e94f336c01829c5dac0b1612de0df4c2aff3d6e214df382c00c5b83df8134d3436c12049c40957ba6da005ba61ac8cd9e2e2ddb0ebf8bb93874324d7942f9c5317ecc4bf607ae494a1622501d00d8ab8f18fcd2c458181b8609f7346f5a734e241a1a35244da64dfb8eeed6520736", 0xa2}, {&(0x7f0000003480)="5b93e61c1d966fd7b099a1d74ecd86e1dc39272f8d92ba26513ad843878504517e58c570645ca3c328874b90d3e3e39fa334a4440d07fb422340f2dd358e4a81cac2cb1a3f", 0x45}, {&(0x7f0000003500)="63f64902afe0322213c45f5bc9c0c60b51c980be7cf547cbeca8f9b6d490167cbc112c8f9e2062b76b2827eec6933a03f7cba60aae9fb4d41608dcc42f08ff878154f8994b639ace7819d8d9e34e0bc0a13447f094e440eee6f23e60a6ed395ecb040cb9f4735d8c96b776e238bc843e27d91b7da93cb39bf6eb1f303866f84244144fb94f1af68d64c7cdaf38f510ece5614ac67f267510ae7fdde27d6d6aaf2e2fe989ec586b46cf18378a2d6d53805db7a96e37eb0564a4abbdc9a91f350bff8c362e7dfa0a28355dbf15cde9205b0b4d5fe3ad53a66cfad2ded66dbf", 0xde}, {&(0x7f0000003600)="c4109be3aa92e880a355d34cc89955b0caa71bf54fcadd982fa3137fb912a90928ca88a09780cc1b71b4f113f6064f1156ab379c137f8464d9fdb46b3efe215d23af82a2592ab5cd4bcf9b0419d0e52ed989f378eef2f947b3824f62af496965", 0x60}, {&(0x7f0000003680)="df4c826e79f36a8d2b5e5105edb4f0fc72c4aa387f4e2508a7bc054449a5d8c75f0d19346a8340d8597371cf676da0215d28d18dfc2c0fe7c9e4c2d79c249b5bd096431b9a6b289039aa2cf3986e92706b36f1648893047576ca221d7587f4645badba69466f9807a7582e1b105b0fc9d61757a8b4f0652b0dee7a", 0x7b}, {&(0x7f0000003700)="39dd427a57186841eb534450fa3667a6a6fefb1c293803441c4bce065e52a9858f58a9ded173b8f1d98c20b8d57d897dc5e94673c38fba45fb6deed2", 0x3c}], 0x9, &(0x7f0000003800)=[@assoc={0x18, 0x117, 0x4, 0xa}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @iv={0x98, 0x117, 0x2, 0x80, "5c3000f3a4dcdb60028ed28783ceb7e8b22ef90423f45bbd8b088b472664505c35663607a7aba90e92bc33f8a8ddf86d7a695dd75b8d962eecf790565ef16caa57d9140a2ace4c30440eaaa7cb3db4fc37b79fdda5e7bdfcdeaaeec86ec8570ec96455bca6d806dd6439156970f02ee093fd3f41c0df3cb5231bd57a03e8b9a3"}, @iv={0x60, 0x117, 0x2, 0x4a, "fb856b5924762f58983831ae479107ddd40605697e606de7c4818ac351bc7889499c9ca15c85cf3ff4e1b6f9201d14043d33a3ee602ad29ee7922ca28720bae21af5154e04877124b93d"}, @iv={0x60, 0x117, 0x2, 0x4a, "b65ff619f1a98dffd0f35540dff343b4f34b0f7e1fef80f296d357fa8a6703ad7306b141b1b992a7f2d029db42533049338f5b066f7d0e8fd18626699586478db68aadfbfdcc12382018"}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xb0, 0x117, 0x2, 0x96, "db4caa8fee2e9c61764aa35ec4146dd04ae19a902b4c636608fc92fd8dc215955faca13925c5d1ff77496908fa9574e079ab8af6e9bee53622a0ae1a4e0ba86e53b25c294b97fa92152dc790257abd4b07aee65ca552ac003e2e39561e076a87752d33b927ef38737e85c46d4db581bf0f967df3e44d8f045bb6e93e1f62378d7aa27e3e84b8a46915a4c9c6d4692984d79662d10725"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x280, 0x1}, {0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003a80)="6ac9c7237c8b785d11afba2c17aacee6302cacdd27cb2d0a56322104466a2063fd68cba958a7bc398836ef8a9d7bb028a6785ebc3cdcc8985a6e830d1ddd1756f0576c8211d1d65e88e64f7b24cb7763cceeed34b586ca2435cf56556be76319fa885f94a03fba1d1e48df0829822f2020e741d95617bda5294b7148d055dbce2387aee630ff7916854ce2411b60f2916a8857c574d41e886656ec4cb7bea56e65030139a17276a6b8e6", 0xaa}, {&(0x7f0000003b40)="da3b9217ec5ae1f453ae598f6a380ee0f8e60b32c49971c75ed1bac9e814e7c9cadc773017a58f96c93964ca23295b39ac26f49e3a5619d76b1f893c3b62629331836c21d59ecd7e407e6f69ae6b5fb1c79aa29491b264007f320c4a77c236468d9f6b640d0df76d7710e4b73526e984b0e3ff9478bdb3bbfcd13273d5938fec0becaa264e", 0x85}], 0x2, 0x0, 0x0, 0x20040040}, {0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="a2b1a34aa006b46a236e1d494d3492056ce7e6e766dc24bcbab8afe19af8dcfaf35635795e2f06928494b8e621e8f9f3d78274022e879d17f71f0e10d3bec9f7045c061327538a7579246170332c6af23257582096f3d02394c9fea68b2d16222bce2df02fe159eaf5fc1066e7016af0fa5d53ab9640b13778d98dad6c00628bcbf8eb8ff83fbf9d9f6a3e6e3f2abd2a4b694cca51dc", 0x96}, {&(0x7f0000004d00)="47f9083107528144b1a9db737097088b0143ed93921eb60ca161e708323c6a6e2c6ad98e3f7e62091f020d06921ef7daee4faeeaca23ef0f6717f74a0f9ac48c8e52a964f5350a8d7dc5ac1716c7ab6e326152c6386803b62bc4c754", 0x5c}], 0x3, &(0x7f0000004dc0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xe8, 0x117, 0x2, 0xd2, "0000ae1461b97794e43e695c1bb12e18fbf4a0b220b479bff6059cdf5cc22efffd0a322a58b08893e6576c2af04067ed8237754f5be3dbc7ba6dceb0b1cb01ad61f809513e8b4b471b9a6736fb73598faf91057b406a881e7ab9303e3ffc3d3c1e3035c74f5e063c6d413ace2e0ac43a04b2bf2d501e6ccc5fc0fcc27c80db5bbf3ec26ff0dbe20fc54268ba8f7af991dca38c1ca5da62e3b72e765cbf3e3a758f2f71a0f049677a3b429bf353f302f4f412cd2dcbbde26a659e6f5dc06b4cd4ffd95ae6568e632d4a3139adb4f3494eb3ea"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x160, 0x20000}, {0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004f40)="fd6601884526df7c4176ea3364f7805a1d98dfbf409693a823541b14e6b5a8f45ca904b0f7835d5fb5c4b9a43a24b4407cd242f502cb21aeb3bef5e91ed8a9ab5116ced86a9da376ec1fdefddc80439c86b9221b020cf20c862667c12138d420e84bfa958b7097267133aef7be24f0b4233a29a76e006e97a0027caac0c2c2c3b5235e0729289fd2d2086bf5de52c54e19d50dc37bb631ac257ff3b34b723ba1e24b8eeca9b4a1473403a5b9138b4e58789f1d0ab9af487408521399876151bb4ea05c909a619b4d9d12117bf3", 0xcd}], 0x1, 0x0, 0x0, 0x20040000}], 0x6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r8, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000600)={r8, 0x618, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000340)={r8, 0xa5, "ece2a3fdcd0f22500e5e1cd5f9181c978fa9eb2890bb58fea50b234552eb45bcfdadf7e015abea3f4f93d73297111af295579909bfc778ac49f7e73f886022d8baf6674f1c56410bb10d3681bf81aa3887e8b7b6d44b3c4bc9348ca3c703034277e156358e7e3e4a9b8106ba0d03e19d76ca40ece379c72bf0013ecaab80a6015f23246250b40f5ec21289f5e35a9b1b4e5b8efcf6dc030f240ce6aebfd5fd01c2f13e0471"}, &(0x7f0000000400)=0xad) sendmmsg$inet_sctp(r5, &(0x7f0000000540)=[{&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x3, @private2, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="4d47f5d9705a994c5a76e75ec2bddb130c9b1b9b5167d651c72399d2f46d68b328c87d913dc3f7464f4aff07c3d5838cbbb5d8409decd31640883e9de6948dd2ec3893e002efed06270a965f385e3473443d86824e6f9f5669508c23c0ae9853a959c0e2180a74", 0x67}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x8004, 0x6, 0x9, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x1, 0x2, 0x46, 0xd40c, 0x800, 0x400, 0x1, r9}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @init={0x18, 0x84, 0x0, {0x6, 0xae5, 0x3, 0x3f}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3f10}}, @init={0x18, 0x84, 0x0, {0xffff, 0x1, 0xcd3a, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x100, 0x800}], 0x1, 0x4044000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000600)={r6, 0x618, 0x7f}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x6, 0xfc47, 0x4, 0x5, 0x47}, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:26 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000840)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4000}, 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x100}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 1712.738559][T16754] FAULT_INJECTION: forcing a failure. [ 1712.738559][T16754] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.770924][T16752] device vlan2 entered promiscuous mode [ 1712.780050][ T27] audit: type=1804 audit(1589898746.540:750): pid=16759 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2625/cgroup.controllers" dev="sda1" ino=16168 res=1 [ 1712.784278][T16754] CPU: 0 PID: 16754 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 1712.813739][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.823802][T16754] Call Trace: [ 1712.827115][T16754] dump_stack+0x188/0x20d [ 1712.830607][T16752] device batadv0 entered promiscuous mode [ 1712.831452][T16754] should_fail.cold+0x5/0xa [ 1712.841640][T16754] ? lock_downgrade+0x840/0x840 [ 1712.846503][T16754] ? fault_create_debugfs_attr+0x140/0x140 [ 1712.852330][T16754] should_failslab+0x5/0xf [ 1712.852845][T16760] IPVS: ftp: loaded support on port[0] = 21 [ 1712.856743][T16754] kmem_cache_alloc_node+0x25c/0x760 [ 1712.856770][T16754] __alloc_skb+0xba/0x5a0 [ 1712.856786][T16754] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1712.856806][T16754] ? netlink_autobind.isra.0+0x21b/0x300 [ 1712.856828][T16754] netlink_sendmsg+0x97b/0xe10 [ 1712.888231][T16754] ? aa_af_perm+0x260/0x260 [ 1712.892751][T16754] ? netlink_unicast+0x740/0x740 [ 1712.897717][T16754] ? netlink_unicast+0x740/0x740 [ 1712.903014][T16754] sock_sendmsg+0xcf/0x120 [ 1712.907477][T16754] ____sys_sendmsg+0x6e6/0x810 [ 1712.912256][T16754] ? kernel_sendmsg+0x50/0x50 [ 1712.916953][T16754] ? _parse_integer+0x180/0x180 [ 1712.921830][T16754] ___sys_sendmsg+0x100/0x170 [ 1712.926520][T16754] ? sendmsg_copy_msghdr+0x70/0x70 [ 1712.931649][T16754] ? __fget_files+0x32f/0x500 [ 1712.936343][T16754] ? ksys_dup3+0x3c0/0x3c0 [ 1712.940776][T16754] ? __fget_light+0x20e/0x270 [ 1712.945468][T16754] __sys_sendmsg+0xe5/0x1b0 [ 1712.949980][T16754] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1712.955010][T16754] ? vfs_write+0x161/0x5d0 [ 1712.959445][T16754] ? trace_hardirqs_off_caller+0x55/0x230 [ 1712.965178][T16754] ? do_syscall_64+0x21/0x7d0 [ 1712.969868][T16754] do_syscall_64+0xf6/0x7d0 [ 1712.974382][T16754] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1712.980278][T16754] RIP: 0033:0x45ca29 [ 1712.984181][T16754] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1713.003791][T16754] RSP: 002b:00007f4c3ec87c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.012226][T16754] RAX: ffffffffffffffda RBX: 0000000000500f80 RCX: 000000000045ca29 [ 1713.020241][T16754] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 1713.028278][T16754] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1713.037909][T16754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1713.045892][T16754] R13: 0000000000000a05 R14: 00000000004ccddd R15: 00007f4c3ec886d4 [ 1713.058394][T16752] device batadv0 left promiscuous mode 14:32:26 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:27 executing program 0 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1713.270752][ T27] audit: type=1804 audit(1589898747.030:751): pid=16767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2626/cgroup.controllers" dev="sda1" ino=16168 res=1 [ 1713.395903][T16771] FAULT_INJECTION: forcing a failure. [ 1713.395903][T16771] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.442703][T16771] CPU: 0 PID: 16771 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 1713.451409][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.461471][T16771] Call Trace: [ 1713.464781][T16771] dump_stack+0x188/0x20d [ 1713.469124][T16771] should_fail.cold+0x5/0xa [ 1713.473669][T16771] ? lock_downgrade+0x840/0x840 [ 1713.478541][T16771] ? fault_create_debugfs_attr+0x140/0x140 [ 1713.484375][T16771] should_failslab+0x5/0xf [ 1713.488803][T16771] kmem_cache_alloc_node_trace+0x27c/0x790 [ 1713.494624][T16771] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1713.500627][T16771] __kmalloc_node_track_caller+0x38/0x60 [ 1713.506283][T16771] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1713.511674][T16771] __alloc_skb+0xef/0x5a0 [ 1713.516051][T16771] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1713.521636][T16771] ? netlink_autobind.isra.0+0x21b/0x300 [ 1713.527286][T16771] netlink_sendmsg+0x97b/0xe10 [ 1713.532065][T16771] ? aa_af_perm+0x260/0x260 [ 1713.536578][T16771] ? netlink_unicast+0x740/0x740 [ 1713.541539][T16771] ? netlink_unicast+0x740/0x740 [ 1713.546486][T16771] sock_sendmsg+0xcf/0x120 [ 1713.550899][T16771] ____sys_sendmsg+0x6e6/0x810 [ 1713.555655][T16771] ? kernel_sendmsg+0x50/0x50 [ 1713.560339][T16771] ? _parse_integer+0x180/0x180 [ 1713.565208][T16771] ___sys_sendmsg+0x100/0x170 [ 1713.569898][T16771] ? sendmsg_copy_msghdr+0x70/0x70 [ 1713.575042][T16771] ? __fget_files+0x32f/0x500 [ 1713.579743][T16771] ? ksys_dup3+0x3c0/0x3c0 [ 1713.584181][T16771] ? __fget_light+0x20e/0x270 [ 1713.588872][T16771] __sys_sendmsg+0xe5/0x1b0 [ 1713.593564][T16771] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1713.598714][T16771] ? vfs_write+0x161/0x5d0 [ 1713.603145][T16771] ? trace_hardirqs_off_caller+0x55/0x230 [ 1713.608872][T16771] ? do_syscall_64+0x21/0x7d0 [ 1713.613560][T16771] do_syscall_64+0xf6/0x7d0 [ 1713.618080][T16771] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1713.623975][T16771] RIP: 0033:0x45ca29 [ 1713.627963][T16771] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1713.647574][T16771] RSP: 002b:00007f4c3ec87c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.656033][T16771] RAX: ffffffffffffffda RBX: 0000000000500f80 RCX: 000000000045ca29 [ 1713.664111][T16771] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 1713.672090][T16771] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1713.680061][T16771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:32:27 executing program 0 (fault-call:1 fault-nth:2): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1713.688040][T16771] R13: 0000000000000a05 R14: 00000000004ccddd R15: 00007f4c3ec886d4 14:32:27 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c054, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1713.817831][T16760] virt_wifi0 speed is unknown, defaulting to 1000 [ 1713.843967][T16758] IPVS: ftp: loaded support on port[0] = 21 [ 1713.906823][T16789] FAULT_INJECTION: forcing a failure. [ 1713.906823][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.997101][T16789] CPU: 1 PID: 16789 Comm: syz-executor.0 Not tainted 5.7.0-rc5-syzkaller #0 [ 1714.005905][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.016230][T16789] Call Trace: [ 1714.019550][T16789] dump_stack+0x188/0x20d [ 1714.023905][T16789] should_fail.cold+0x5/0xa [ 1714.028435][T16789] ? fault_create_debugfs_attr+0x140/0x140 [ 1714.034343][T16789] ? lock_acquire+0x1f2/0x8f0 [ 1714.039032][T16789] ? netlink_deliver_tap+0x146/0xb50 14:32:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c055, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1714.044338][T16789] should_failslab+0x5/0xf [ 1714.048768][T16789] kmem_cache_alloc+0x44/0x740 [ 1714.053556][T16789] ? lock_downgrade+0x840/0x840 [ 1714.057334][ T27] audit: type=1804 audit(1589898747.750:752): pid=16791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2627/cgroup.controllers" dev="sda1" ino=16150 res=1 [ 1714.059136][T16789] skb_clone+0x14d/0x3c0 [ 1714.059160][T16789] netlink_deliver_tap+0x91c/0xb50 [ 1714.059185][T16789] netlink_unicast+0x5e9/0x740 [ 1714.059206][T16789] ? netlink_attachskb+0x810/0x810 [ 1714.102744][T16789] ? _copy_from_iter_full+0x25c/0x870 [ 1714.108132][T16789] ? __phys_addr_symbol+0x2c/0x70 [ 1714.113173][T16789] ? __check_object_size+0x171/0x437 [ 1714.118557][T16789] netlink_sendmsg+0x882/0xe10 [ 1714.123333][T16789] ? aa_af_perm+0x260/0x260 [ 1714.127931][T16789] ? netlink_unicast+0x740/0x740 [ 1714.133498][T16789] ? netlink_unicast+0x740/0x740 [ 1714.138524][T16789] sock_sendmsg+0xcf/0x120 [ 1714.142950][T16789] ____sys_sendmsg+0x6e6/0x810 [ 1714.147809][T16789] ? kernel_sendmsg+0x50/0x50 [ 1714.153245][T16789] ? _parse_integer+0x180/0x180 [ 1714.158113][T16789] ___sys_sendmsg+0x100/0x170 [ 1714.162885][T16789] ? sendmsg_copy_msghdr+0x70/0x70 [ 1714.168526][T16789] ? __fget_files+0x32f/0x500 [ 1714.173230][T16789] ? ksys_dup3+0x3c0/0x3c0 [ 1714.177678][T16789] ? __fget_light+0x20e/0x270 [ 1714.183238][T16789] __sys_sendmsg+0xe5/0x1b0 [ 1714.187747][T16789] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1714.192786][T16789] ? vfs_write+0x161/0x5d0 14:32:28 executing program 3: socket$kcm(0x10, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x618, 0x7f}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000600)={r4, 0x618, 0x7f}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={r8, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000600)={r8, 0x618, 0x7f}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000040c0)=[{&(0x7f0000000300)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)="198a1c85f1c2b22e", 0x8}, {&(0x7f0000000380)="d92766b960d71fce9205019b0c8312d69a0c73dfedc163fd3e3d4e4344fa17e83fed8f4f9d0def0ffea8e728312285fa19d192820b43d7b75d8ef76dd09158e9bfa18a0a534b4a22de306784612022c677659009326066da8dd88669f9d699f3c814cfa170e7e1275c038dcaf40dd7e228e2f517a135da65fd47b3e2b2345f5f64e1", 0x82}, {&(0x7f0000000440)="bdcd233acd082be9c26ed265136ae3ececda13c71f42a912459038be09290a4bd9d8649e8a85faefda3646b8aa2532719251a8f52716ce1efde8390aa9651a0ef0c6a690de5c196690e5172cb9b3c2ea3134", 0x52}, {&(0x7f00000004c0)="9d8326949f5dbefcb37701e2bde3c957d42285875c1e4ddfd374faac3c081a52f10e1432957c3d68a64c8027f133c8d707918a982ed5f9c54645b73c58626b18be24b60e9004e32132dba10ef9371d268949d9d06aaf0eb0203e465c32e0c321e211d09f23f492b9d30f2ccb069a7a12b25575fabaf8bc92aaf5ff319e", 0x7d}, {0xffffffffffffffff}, {&(0x7f0000000540)="48ddd754739ce583bc7dd2a27b6f231555a38a3b3bfc17755a83723080d5a3aad4aebc2057303508b129972b214be80f724c96faad02f4081c46913950ba7d69215e1b66960f84cd884af9d73e71da56d31532c1f89a37a831e4bae2608cdc06b52c28b658181ee5b017515fe648aad98c8d1863b6", 0x75}, {&(0x7f00000005c0)="f4de3891bbc8b451596d381617ab08303f3c8d07b51149202d08c345597f1753a2b18dff1a115de21c6c896ef87141b0446792ceefbc21898a723817c9afe4b9b63fead229e0b4524fc249a712d07b13817d49b9670f7f122d80256963400e2fe3dbe3f4613bfb19229abd94bfc90791569b3608ff8f4012db2b2ed8dce950db28b6e88b8b3cc5", 0x87}, {&(0x7f0000000680)="7d931f224c0bcd1f003015729212f85bb37160e77cd2451f7a10e0cab3680f6d8bc929cb4cb483499271d868fdd5cd5aa9d6f1e9b3414c89e0f4ba19b9b8a1cb36569c370d485467686f6ab83fdf89432592cc2618b62eef2587afc4dad32d6d09fad6c83ba78f120c16e6ee56d0148d0f51994d30c01b8a7d4ea6992a5d0eecec7d45ad110c44c101735fc4f49e13c8409d29818ff51d19505526f8bb5c65be40824f838a62", 0xa6}], 0x8, &(0x7f00000008c0)=[@sndrcv={0x30, 0x84, 0x1, {0x1000, 0x1, 0x8208, 0x1cae, 0x1ef, 0xff, 0x0, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x868, 0x2, 0x7fffffff, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xfc01, 0x14ce128b90de2e8f, 0x2, 0x2f5, 0x7fffffff, 0x9, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0xa0, 0x1}, {&(0x7f0000000980)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001180)=[{&(0x7f00000009c0)="9680bacf68cc6f9082f9d017dcba1aec698447114e3eec5a6c981c58d575a1c36faf20d356777a80669d5ef3a1b9871bdbd9a2e7ecae4eb4ce5412bcfb55a8d1e9442e89308e1ad8f3cb157d8189635c9389dd4b0560e431928327dbab32411eca454b1ec3e0c7b9176b3af03cedcea1d9fc41349305ef9c81403b719379e40b9b0cf0d194f997cccf26fb52f74d92c92b0cc339eb69d8bf338feab06d2ab3e89bafafd9ee06b88969d1757bc0ba454c36c50652f56d54017ba97305185e7d0249dc8f", 0xc3}, {&(0x7f0000000ac0)="b24edaa7be215f96d2fddf7fdab7ba97dff38105f74ef451b650c2693358e794852283fd5e701a35c5c1e3a42514246073d3eaf2a57f7dbc07c6dc325a099c3bbaef93a82133e74cca6c193b91b54c7ebdec11dba3616aefa2820bdd3d5a3eaf22cc6d375255f8ba0b1b4b136c7bdf53158289d96fa35c161800012314760c43628d7f1f040fc3677058f3dbd0d0105d0726949f30f533cf5faa7729764e20242c", 0xa1}, {&(0x7f0000000b80)="39d450af39a72e1a63df6b48fb6ff1dc60f537337f8e8d15183f35b333d1e1e8f384f1389ae14e0161211d1d87216604dbbeb2909e303e5e59ddf87789fa59258ccd4c48f7e263085c8b6600970d000050266a53a0bfe6424bb24447873a892aa769e08cb1b7f01857b52ddc5f1701abe91b40b422975456530be734091a80b78cb3b04ab94e9653ea1f311ee075", 0x8e}, {&(0x7f0000000c40)="e116ac226a98762c330da262b3b1fe931bb2d6706ebc766cf97845d150e85561c47b61a01a8aba919ede9c649556f271e3eec98594eefc3cd9278e45d4d3cdc950b707b2e158dab4d6e13f31b704d8abf7291659c8e17994cc0ca237b462107fd4fc342a06d9aeab399c80ed892065b60db04dbbc82ebe3bc58c0d7e985652e70f4af172a8564eedba57e6c8610d4fcf02aebe4f5b672ffd05ee836802", 0x9d}, {&(0x7f0000000d00)="eeda990a83267d8a92af37f57bec7c815d4816ed32b91ba95f3ddca81c7e800037008e66c228ae26206c2ebaaf783af08c1439f579bc2876deb833e4097bc59b3ae2c5974cc4e1e9ecafc5a82f3dfdfee169d27e4da318903f75c0f43caa6b67f9de633254fe462cd925eaa84946fb9c5e9c5bf8582f9ec922a062a3dd5d2404ac7a30d9b94b4c166a9a2a93abf7a676c05b4d5f7f9965714c35bd8fe59b4e406634a51a", 0xa4}, {&(0x7f0000000dc0)="54236eadb1c9d1313ee3857cc996867eefd83654131ca9aa5828b331dc35fa3b8231", 0x22}, {&(0x7f0000000e00)="cb5d83446621c7a044426a63f7b7596cff65c3c720fc53d0c6a66b197975aedaebcfa9a7dfca550cbebbc3cacd0d6d68523a7cf22c18c6be517e7ca60a485011e8212b0368564bf1fd5ff74d9befb65e8a1a1d72b52ca7c0655c306aca83699bddaab75550e7393694dd8b8d9168679dab8bd92f27c094c7838fd467ac92ec05c6f16e4a8c737da7e64d2502060937e70f", 0x91}, {&(0x7f0000000ec0)="b0720803bcabfcf589b6febb4d613638b441d645955d5ad193d9bdf7a849972207b23c1bde9a7a510d6a289c2d08048ee4392be8c9d2a3014346f9429557e0c2b6757de5b4d5ed7059813ed8109c2701f0b0eef3b19be84186424e2237eb6f13558fa8e7610cb3b1fd7b9808c41b3dc60bff23a099ab6635fb76d9177a20be48bfc8c1e12afed40842931befc3f2d6a6b5ea82e7bec3e2454008bb83adb998f95fe77d3765996f99ab0d3e246d2ae5741c43718f9fca1348b2ac7f", 0xbb}, {&(0x7f0000000f80)="a000009c8152caab0b30ea1bdc407eefd02b2203e86fef2497f6f6d70101f13091c7a0425ae18de3cb45e57831c9aafa5bdbdee610ef2fb38dda5630faee2cba965d25267d00cd63d8b7b23effb2d48bb57604c65f3abcd8545b32665f1b39ce616e3843a8986e44837b3dc1936c70e23a233640a8b6d70611580a404e3117f3a43f70aad077acaabb8fb109ee297f9355c22b89f3ca88cc652ce519767b837b0421e054e343f2f7c7c16771ea98693288cdafb088011600d5d5525f1e7666e91fea403bd8ddebe5c2d1cf260a850e21967fa40d27407b9070203eff23008b11333ddb5a05cae5e01806b4eeb98454dff87c7fdcb013bde3", 0xf8}, {&(0x7f0000001080)="00205bce18830e274d1fa789db4d4451793e4b62f73c0621c73dc594350f02e84488dca542b7f12875d3af155b3d116ba5b1edd09ad87191f64f189d50ad985252e0830327ed87f4a4a4616eac599722a741e20f57beffb371187b60c4b174a6699d89ccf2fd6aa3ab87c597ed421fde9b013dc5f124b25572793d75f9d215e3a55f3ff7491262e3ca082b45ac6ebdeaf6451523853e31b3ed52b7c5d1adc298e8f1fe5c994e0634338cb07684c1efe2e4d5c4dcbab3b863b69a79a04cc95a9b246892e201558f80eccc669b9152e3", 0xcf}], 0xa, &(0x7f00000012c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x40, 0x0, 0x1, 0x35}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8003, 0xbd, 0x20}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x10000}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x3, 0x8004, 0x0, 0x6, 0x4, 0x80, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x40}}], 0xb8, 0x4080}, {&(0x7f0000001380)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001500)=[{&(0x7f00000013c0)="7368b5b8a2edd4e0aab6074327173b8808e981ad861754bc3f8a84790438baa5861e4e575099c03a50afddcdfdd2329e52c95f2e5645", 0x36}, {&(0x7f0000001400)="8b2c6eed", 0x4}, {&(0x7f0000001440)="2149b560b1e5317753f1a1a409a0886dfdb5c5596a3daeb9f1298d8ccc531a2beaa4614b9e5d25944e7454512a4e25d49b11db9922db0375da599768c0c3bf2f63c723750ec156699d61a4551bad6ccfb45d032cfaed7f390e6b219ceed34bd27930eebe9df2a7e73847437489a2d7bcc775e11dfaa56940e9828899df9da8b23f3387850164db8b9f82a63ba85881aadf7608ed3c", 0x95}], 0x3, &(0x7f0000001540)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @authinfo={0x18, 0x84, 0x6, {0x11ae}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x100}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3ff}}], 0x78, 0x4000880}, {&(0x7f00000015c0)=@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000003940)=[{&(0x7f0000001600)="6116aba96810c651b43a244e9e5aa75aeba9d320225f5aafe07a60ccdc5925937b3e3630c21c52efe6827fb13fa8ad697b513c4c6692b00b741924af4696672d1ebecb411213db69931afeadbf84fe5ed2d571c619dd0c9b27b558a1c3dd498e0361be416c13ff5682ebd299944b666e05fa8d83c015375883f1a56120a57d030a6c1e7c77bcf326b9340477e1e652a7826de8b06829d24c334b695aab88d74f6647bb8f9dfc258296bf20a23b6c04ac5515", 0xb2}, {&(0x7f00000016c0)="2a0f6a9bbcf975742e8efd49b7341599128db9b911", 0x15}, {&(0x7f0000001700)="2fc35a24d2f77ff6", 0x8}, {&(0x7f0000001740)="cfe1cbcc46ebbac0280bb24a36e9e4e4d8e2a588e3225bef3c16873b0390e1d9d4f6758f027dddd5d58207c023fe185e0941c13d6e11a575047791ad21830190e7682ee78a3ea06a906b5496a4add16f2e02b1d4359112c880501fe1e7ca607906220b889bc0553380cf0d7bd7eb0bb5442fbeabce95eeb7c7dff91cf1f0e0d93cc6b851771fb354a340f57652464bfa5f3e4b7aea793efa7335d811330db809f60b59", 0xa3}, {&(0x7f0000001800)="a4d1abb4b47fad4da104ac9d1c900681f11c6130006cf0cc0d1e74de099f89bd7f758285e2c20a0092920ff27bcd21cffde511bdb159f14152412f038fd4003e98ff9ad44e8c8a37c6fe3ee68e72a562ec2cf0f19f6d5ddd87", 0x59}, {&(0x7f0000001880)="cdf36ce94dbe008e12e0027ed2e34077940a00cd70bc24039652ccdc248c3d5a8c84feeb0f98a1cb96727caa2118012244c4593084c4e0cd540cdaebe4cd1f740eed48df959d1a824696e77dbaebf7eaebfd8ae7fc5f4e2b1732c905cda4328527279f96164031efbf373ebb5b836e8dc1093ff5850608fc9a6c1b8f292bc0579ac7fcd14750ce7288622db7419513601456ab1e799efe776017d6adf52c74c00a27d3100dba39aa659a2e85fc9f8b75bc9878fbc31f22e7011a115d58151dd14d63276daf0fdb2c711380cc35a138738bc824871c524af44cfc9f169bb94867943eaa6a5d0146cfff1d6cf098d42c029c231f66ad9ef928570ea2c2904aefe448af182366f6980e6e16295103404a6008afd9bf90cf2be83e7b0ad4ca052eaad14092d71dd703e093334ef25fbb4c5dfdc7f1039865ad20eaac9d8b14bdd5fa97b9f2e72ecd7c14e3ee1f67a49ddf4c6b171d0b3aba7012023dcfeb208acdc2b731e845a8256a01754d1badeaa686d80e0b4afb855357b92ac2c72095307ae31dc4871dcb5b890fbcbe6a34ed336d829408d8a2464cc76020aae62e4829fd41489f954c89090a530d05c5a81d242e25943fb8e5d98d0a588b4d658ffe03c196fd5759ce2f43ef3063d8061d129d45dc7c1bf8152576eed449630360a57267f1c403e8d8dcc092406b9f43eb11faf793e17fb8e865d1361ee1322b25f98edf85d2ea7dc4375853aea7055c43c63ce80b744e300940c827997b5ee3376f781f5300916d593413550eab487b9c67daf8a977f31090bd2f95b5398475a0338fbfdc31fd0689023339fcad74e3648952a3646c3d1cde141fbf1b8240cba77d012ead3fd8016ac93a4883f304bba1ce610161cdb8ff5901cc290053422a403a2700135d0df75a93271eee2ca66ce9399652bfa776f50be1ab28dd1c96a94e020da77c6fdce86e4061cf0ef60728a11a3f14e93fd28792abd8352285d70a924c4faa564d34d5cf260a7cc990ca08c0136c90829f3d4dded5373f8a9c7e673049d3f4dfa479ed4065f4e97737761a44f6b9d37c4870226176da37f358414c381785ba01bbb490c5a29e7c9bb910b727c485049c1e4be640e35a4054c8b862b559e30d356f9bbbe0181bf598adfb2b19d8a8ecab1c251889ac7f07a10a4b5f1756b0418ce8225d6e9103ff94d2a6750d7560915b005164b328fc5b910b4f3673ae7936ec13846183d5ad2d2d32ac91cfe7c861365c19979239f52286fefdd886a7fc0bd2a260901c3104acbd33a1358afc8685fedb4e1090bf4148099ac93181a60e90e978995e24d95dc00ccc3cfd4eece15913938ce82328b073d14bc6f3482be702cc1a28172fb716d9aa70a185f438d327b962972f5b227dc4a78c57ea9df08e50ae47265a183a5e47fc4807b25563b65689e87d1b348c2d540a221da5636df4fa1b1bddbdab6b812e45f81de9695d46aa4e41739a6952adf708e81ea0b62b851b02f377191684d38aa42dcfd575529ebf8a5167b1e05707f03efcb05bd18b3f99b0ae04fdf54a3ebf72404d3670114d44230ca00ac23fc722e0c7fdcb6f9b55e664467d159c0c7baa02966792fcaf9785ab3a448ea14bfc47a88c15e30148061b62c8ca73cca58f03cecf7a9a40619fa683c5b2f14d4bc6bae641a9426919bb63b7fbe1d713c3f93ef57e7d2ebbd44a72fd27947872439879434d97e37b4f1a8e99eb94f7b25d713367d50768c1aa2c49d084198218fbe1162ced9be2bf1c39e684c659f1c383416bf04df9412434424df7243c323bc4633c6493f255b4630b33c666d1eb5b955c3c4b124abebfa382dd3aeea36f6983a0a3b41c03b036b9089cf7831643c074cf7787d2f1dfb323bc08bb3f4056ee4dc45e272295ff1e49477d63033fa717d4407e27b517f5528a5fbce121d06574d0823217b48d864ef6cc4fffd89c66ad61bc63dcf17e258ff4a0f104af2dbdf9f64dcf73bbf91debe0bdccf447f625a6bd4095f4a3b72ebba934b13887e1541f4cad300d192f91f0f0a22c8fa5232082514b5b8c8db7b6b7c9aa1663086095000f1f8a4944b5f0dc350b36868289174e1f70c5abefde66ca43b151ebb2832631a880f83264ae8e0fbeb6ffeb311436b31da89e4ace2225de46a137c1d2d6eab104cb4a06b97f7ae732c52cc59182610b99856f08a091404296bc1ec6524ef4140c092d88120593e9a6a54ef86205d2277f5d4b1455a1f7e909e0c1fe8fb272653e397704dfbd8fcf41736a4fe29a59904d95c0a62ed5ea63d59fd065e01f733445294ba0455a7a6346857bd7bfde7cd1f5fec72a359df7e494a01b90727206b95a58c44cfb9135511410a3e47cc94341cc81f1fd42916f6f8aa0481e5bf9d67caead7e92a4ff89bafb43e4603c85d69e5e0b1f715b4fa0a33e34c63930b0e6604a742c228a5926520cb00f5de01efca27bba2221b1d7b1a073bab670ca102a624a661952c1d2e0aed15f1419b52650ccc0ab4ec8acffeeefaf6439c59d2262827ad78fe0f3118c3e99a95933a3aae9adaa42c0c983e73b4f31a5c2545a0af5a4a412c8bc9f830c905c25550a5b4a0151853f70038f7ac63d16ef76d211e51ece08968a38af38611423f06587588175f5a7a929c5fd20e1c3128f6b8f8c14d51ef389f95499848a4e6e08653636cc7b099081755dea031a1de524c0697a2f47ff7199b2e42ee5d4b0ec31989ea7b6337b89d2df963ddb45580d1ccbe225d3b891052ba8149242b0b8b607034c5d0310abbd2cd533a99a521419b7250630a2f9a6209023d4ffe29e966f8d339ed6965d471cad501da1afe91bf2feb4be8a9e17f2f04b2edd1acec3925e40aefd66efb6e7a3e05bbd09f08e8ae283979bfa09459c79f1b967f73defdf92dbf4dfe8bda4b3cdd6641c97a9c955e9b00c619339aaf9cd358c057e74c4705a672b44dd725815156abeb89b064e4f41ad10088d817ba9d17d71d5b11e8984f315dba7e748993c77a7e0585bd416a7b55ab2385e42337ac0f2b0e345780714893f55fc11ed206fa463929ae5d9c7200a8dcfb8852ae08713be0987637eedc1c3331c226f4d57c75cbdad088525cedd91ae2f2850191b71b400d6be54cdab86cb786cae7c7f630526c6d1d7ea7da58658866de46cd13855d508cd1a8e23fd9899948fe4e4ac73eea5e8bb5872f6c632378a1da610dc4fb89fe0fa4cafd600fd2b95e23188cddfe473e148706f8a3e4d32a65f0af63d6c6595217200bc93aa89cdc7e3d320d0a8a3a7996215b798e02d1358152490cf1def27f9f8ee76befcd605f80eed8090dc26b4ef563edc3015382a11d7f65407d5a37c2ebc7f8a7bb520ae55c7c62ede4e3b5520451ed5a00d38e92ddb78ca49ca13140688d46ae813b0510f8e56e248f0ddbd81bb33cb80c738b94b93af070792c5816d1f321df169234660982a02877c65c784c1990129bb04b139052e078e1b605de6f65c40e73af1cef63688aac60ec31bddc5d3de3591bd163607f8c3529e578f201a6b5c74cb148fbdbda3b1e7dbc8d74a66b81ea841e3bd59fe0a142cace58858cce93d46a7b363cf29c45c4358d98a7f773827f42e0e1af7780804405fe50f1cf6dbb32042f45436f3bd0e07e829926a551b9a0ea7c441f2cd13751a77c934ca6d62f7552e50bb47f6ebbbee163a9c7817999e5fd9efd4bab7988b9782cc71e2cd710d9fc27379d90f3ee60bef7883d7ecc66f180598a346f1c1d0747ac72c0f883d5bc57f9f14de0dc3366efd98ea7823207e333dfc615e7122908d42be124a8639a890f122a0e58f71215f1ca82f3f25ba396c41abd1566926ac7d304ee3385a72b78baeaf1a8ce1ed76a1ca93073e3f5231568eef4c802e95cbdd41cfb5cbc10a4ce6491afd6b3319e6e4c142bb22baff442395d6a25e7642ce916fef86e1d1c9360c690416d97c6d576bf309a23660520f0c24386193f87ade78b50cd9603dcb05d27afa8687a5f587684685abe1f4e05958a69a7bc21b5f8f465dbe315f84e33f98a74158d0d7b2c0e9091db1ef23df59bd8865dbd9ee07c70ba6b61b96c4c6709f5d0584b7eb3f666b7cf6aeba533cfb4bedf51ad9e3067b5270849af6d7a8591aa2d26086191292791821608f243fd53cf393f729029e93545e2491e26799de7a0a43f46f4bf1b26cb3f6ad69886369bdc81c3377dce479f60399d7ebbfaf36ee8cf001981d9804fab9866e29562f13c4c498ddf504ab3741b5df998f12aa3a4407e0ffdbd711ddbcbafe5070ff8c8b141e0365911b3a2079a943afda54d8f1ae47db373a8978c94af73673487ad3f3f2101a3e1c0784fc73cb50f09893a03949fef32f981ba240ed3bd0ea9f341c01969091308e80694825c0d6a6c64c5155256d36583965cc466a0f35089818a38c817b659b57daebde6dce91757dd861260070eb35049e4b4b20e4313592cfecba9eae78fcfdc0f080c6508c13a596065d3e40422b0d96f10d647c02efef1272b701dee3c52e998f2d09424ceccdf11b95038caedaee14be8ca98efa9da87c06f9b869defdab08d789353825d87ada95032c3042f542b6c3ef686f8671c3b12fc83c862f36f35aee0d7ec2e595f666b2f59264d876ebb93a1a34d99f58bdaf91de7741683e70fd679f1f7acd48d6aaa71c7c36bee9f5023d9a3d21d883d4958d44335a1932a16136f6fa99db6fceba325ea2a22aa620097e25c706d38e30eac4f7c8394b745e2de77f81bcf19baba980024bb18dfc64a7674d0a687bf860c59174eafb0f94ce7b345eb55a9616da614faff586923e18c53256d27771c8d5d0e86e4a38d27f2d7e7cc4002dbd92735ed4bf359935ffa2f34758c64bfc6d0885ef5f03d9bc04476c25386b22ae6273d3510a5f4237b39ce05a783627f33c10ad4ad81d696787c8f5dcc93360a991626feca656bdee96e9eb6f42062ce7df2bb7d6e1f0214b1bd948311560ed097d496c0b4a6a0fe7b55006ec6725a02274b9363befe8255c0279894c8e78596b82bf578e0ce8bb36d88a61b0d352162736d1391364e5986a36c5d97b349dd7f8c44284cc7cd0235cb250396530b0800704c5fecdf7223a7f1fabcc40bfdaa6a063a1da2409ffa838264b6f0ba33a800c619a383495214e161e189ec8e0f64d18564c38b740bcc6334a1e47457f56ebcdde91ad5442bf10c5ae469cc1a52222670a5b7609316c3d686a9bd0bf69ffd0175cc6905f6b4fc6cac3800b3c6d199cf1c2ba59db14cc3932f56a13b39047a02b467b175fd386c4dd8e8e87bfc747c89c711571d44a49099e6c251340fcad65963b604e298b54cebaec56da6b359392408c7631141521324d58b1cb56969263dcf88fbb230c284ed4154fdf33f6a9728df066d5cb3f7b96ff4a173716f61d73f614fec6504676c7b9e2e062ebe60c78eea211673c3f95278dadec88c9e4a32348bb75724d0803005a4f0c3e46e4f39516fd6b78f3605bfbb16ad8e6e775987afe5d1233b99c4a68e7a824b20e2b1e08c9e30b4154b1cbdf380c2155380601cfd1edebda7cea9ad5f8d4ab543e4018315a9c99c30cf6e4eab7e5b8c4c288acf5b198f5206ed16ab7b2c69882504125f16cc3064792ab1cddc32e6be75946d6949452884ccec610dcce00719e7269eaddb705a7cbc655591803f554c0de913eb9907141fddf1f831c88cceaa2d740296bf70a9a350d5e248ace5ce09e3232818f004812659118eedd3694c5d703c2b940c650cce1c6834e600270f5a9586a1d9daf9d9eb0aee8a8e31ec840f4004a56c6055883eb6ca604645ea2cd50a5", 0x1000}, {&(0x7f0000002880)="581a59e8482d60e04367f61e9e2ad2aca1912780bcb817eab6aa56f8a66c84150ad033a667db85b8fe2af4257560ce04fcbeb4a13fa1578040720ad5866141463f9a1c1fa63a493616fee69c89d5ddf9931371b8564d0ef787480e1185eec01f35209a67ba2f31640a63b2f9849d2e4c58537319296d7aa2ddfd36a3268bc1325307fb3bdcb4fa33fcdbcd33c74f94eeeae18a3f8c8a8c4426ed48b61ec855b8bb48b3fc0d85661ec74992156601b4a6c3ebe84b2e4c5deb87239daa0bd71141c8bd9afaa05d24ee4d4e681c0c4cce7352baa1ed7a5d5221d3a1a879674a62e48641672bb44d482cef90f8b571a032b90fc40e72fbf8f2475044dc80f1aeafed0266a7ac77c174be51b47c39853883537fce4c6efd695fad39f5324cb5308dafa5304c4b8de506ecff058a8aef50df110670a5ffe6e372850316610a1b92d3c418fa8404e8b569106221d4f5bb92d930e85101595f3b61d7e30386b0812cf925b50986bfc0594e6847948755f57884d71da0998dc7162be2cfe349996e1c172caa6b862cb674d5624b02b045cf45938a155f4950eca89332401d300639c91e65dbd6bb072a27608519d24187f637f9b054550bbff3f2701d047f0e559d13f6663eb80b561c99030fb21fa6edeb31c97d05ce052da5bd3ae71db835c163e2e063c5da0770b48b392021443f1ae2522819ea2d0c2e810d654c224351d746b05ac22b51c2ee917f147a143ae6b4c11b19a6f79d9bb50a9c4b421b3153af6b07c8839b9134dd86ec479642ffcc350e6e705300711113cfdb45085df5afe3f40ded8eafa42154e88fc7914e430a62547159d91d9ce6f1aaec1ac7b3307179e6cf86314a42394987c01ba53fd92125da53d99bb6dc8a4277d84304129d8d2dc2798e8fa7514700684dce2a0cc308bffa3c2113ea5e0dc5ce0ef516d455d736a7108bd324327eef8a36deaa3026babadb17c2b2794d8e1155381ee8ce27e3c776b7562fd0eebcc6ef24567a81b67992f2cc5f4fb9b1d235c4973ce10ce8c3cd78ac641c850109e1e19ff136c2eaecfc11f8d1cb45501a93fb40d0600e6afb5ee2370ae4619d2a1ab4e72c2d95b458b8d8fb561dae139cf13aee6a9b9eb1e5f28cd25ce26492973c132f8a9991834e5ffb3a7b1b3e3d7fae3ad80d1a37ea7834807152f695689dc6601708349955aa218326c6fd53be161d4cdad617d52bc4fb11035f5c3fc5485db31faa6b7c3069f7b26922060096b037b3e66d549a7126d65668037ecb032817277dc4430a9d277c7da18b94004d502ee4dbd2d1406ecd2352cd01390e6f63f57b381f5737a84b93c980407424268cdd2aec0ec1adb7d63be7d53c77bb000c4f6ba3a1657c557cd840fb8f74d06a7b83dc1b07255dca50e8af0af80abb40de88a999f988e3bc2d92120c377a7bce51f68975d23154f3f026c5305eada2005745bb5cc6e93350f2f295dce85e396d5d1d0c240530aca40af6cbcf6195d6ba69b98a3efd1cba459fd023555062b069bf3cfa4d17a852c645b242dc9e40f645ad333a74f92f5e77045b86a98b3c24a2961fd4c6632a78eb2cf0d1dee9f24e15aca89c6055eb52bbdf85162aaa56f9db7b53f9ff62c69dcfe0d5ff7bedbd9834733624fa7db05366a73444c6bc03f0dd17f7f36d862238b9801b896b303a3821a138bdab6c21154ad12295aba71fd5f5610ee195ffd288a822316250b28ab65e6f139d45914d9acfdcb18fc070f35446428327afa7b30309833e52ce8a37c6186ae4d0aa4514e8668a4a24d01ee368c805ac979eafcddebaf3d4a39ee05badf9bddc2d681f02570eadcc3d88e2d8fa3012ac7ed9449410161768aaec0bb84df5334c42629f86e72636fcc22b1e1b47a8ef2e50c71f0a057e12177d8771d563ba4aa1dceb84d9923ec356aa13a7e39010d9a9740ad5079a5ad5e793918dedda4ebd4a0700f3f9dfd0a405ec28fb9705ea06e79707fbf39c37ad6c58730c0ee890178e828498f34aec2fdc0f7a962cfb17e2ae0e3214b59acc9b27a697bd516b8da3770efba22077e2da0442506883f84f3fed1394c3424cd946e226f407e6e51e53142d8c017c03f1a0d49b8456b220669622fa0b9a2bbec1a53319923f3cf77c5d6a01ecf2b2512a8601e0dd628a8516464fc0a37c8583b689dc18260a2c53ccbe81e4b6f6e776294ebd55e312048239d7e8c93b2acdba2e4a94a27a009ed807807e501f3fc0ea8def57633960dc22c8790f674988fd51380ee607bb36da5b253199c74a4f03c633102524b402eda4b5b1d416ae1cd8cd8264898608c04ae4e85694053af308578c4c6ac37bf0c75a376cc96f0c31a09de9c770d44ebdd2526fa391259523b6393b07d1c1a9d5bd78a8cd12dc9a2ceaba8f9e71b8aeba8c71a94b1d230862732c9e2722d131d4e2f401ac783d72251a0ba4d3ace22c42b699a5f8db4e687f15fe2c5f5d0dd04a00c160714c1390539e4be4c69f4f8942eee6949cbb1d78bbee9266f5eafad5952f190e7350d8870f2a6bd1460f6c10189bac274f03fb2cc491d054d91e88bf46e022b4da9f16e4897e8f995bb00d086ec863f24d752e5a89c59c97dfd955126d55e41b8aa72df8d342ca6dcc4126ee7126f48dad49baad5d7063dc8233b6259f9ea361d1c93877172dbeba07b3c30410afe76192de3d36b074e77a4fa11169e0bb7af795d46e49ce041f6ff5f657cf343dbc8e84af2c0e9318c6d4e6899cf369057b419df458459f29344b538559337f3978c349a9fd6073bf297de6488560914b9d4b52c028f80ffdcd0286bbb35e1faf31b14cb478306b04ebb0a9bfd5dec348a1a08c8fe2495c1c4cac98b8d01adf3391d9eef4d1ac849d8b7ac0d619e6b53d06c942abee312d55bb2d8d9c82b72701bdbd86824c7aa7860d46d58960d49410ebec156298be6f116b1637ff1390a62bfe75c9082c17608d70306ef73463ba8f2efa154881c886478642caf86c944f65d142868b9420aa246d506eac1f8979f63d3add6dec3732e127ecb89b5ac151f26b61e2b67f2e5e8e570c775d97d50992e8bf495b1967046aa3310ff11b1207b8c2fa75e5f3ae0ab9910ec75930b7ab5705359eecf8b40be550d4bbed44d2cdc42aacdb653ea848665c447078395b2123ef299760571a3941428d066c5146aa7634f3e057fa1b01678a1a6d4936a32679e69e7bbbc1a9d009eeb2207d0d92b015b74531b22406009557547d5a61a6d857dc5eebca8efe973e2c29ec7884d47227e752e765b451a45af4e24f5ece579a1b026a35c3f47194b32be0f3b8b5a28b2eb5e4c763ca17d36d3dca7345cf5e90678b70c2dd987fb6ac7137d0be807752a123cbb532c03cb718ad7c2cc4ce02c4697345925e13a34a16f6b360dbbd3725261d8c3ed89ab1c80235000b415aa0a173a74501f89a09adee28b2bc8465059d6c84363477b5a22ca001820b64048967ecd44da2a3ddc6f0d4265d4fed48a2de9fe4b37f589956256fc1d3087212e3717126fc7613dc56d5062063f8347d490a08858107d597088f20bb912f18d63102256dc9c74fa1c91f20d67f11c4186be0e2086b4da8c954c297ded43bbc7177982b5755398af7c42f34e0abd9d78ee1df501a2507e92b02bdc0bb137172d916200f7239120f5ec44e725c7b9e02bded06cbcd4e1eaef460767f63d5a0c89679eb2cce4273aaad27332019d583445faf9122407965938a1d1c4127310deaa435b4596b6677a463ed9272453b18af7cf5038126f9c7ded8bb2a585dcb3dc0af5248101232efd79609c234196dff1ed100cba0e9714d2e10fb961e1f96a9f1e82094cc66997eb5403beab2e2cc7b77f953ee392e5ad937c387eb5d25950a6f76c1981cdac1206c8fcc374d5c7a6e623364d6dcd308b3f5423be42c1398c18f0986dcf3c7cfdc213c9b733251cb824b2adeeac420e3aebbfdac82b12e9ed9417cc3c2e618a658455cd53a126b99c1808f3e3cc2d833ba7732402a8b7951231232af05ce79b2865e036444004ec280c2b8848c540253910d2a5f2bd88ccac4d5a6e367ed69490adf58c46a64318453ae5b468fa27100f498b0adbc8b749730e5ea38066e802c44f492215b496b13aa92be165d9cac52cc2bf508488755959ae606161106ec5cbdbc506d6e56385084f2633b80fdf5d996baee697600fe8db2cf7c62685711ab4fe6adc7a70755ef5429683bc1b8981ccb3ef2f854982e0f904a7abdbc627fc1b8eddb0e9de1118570c8a69ce7b6a9199aba1d58cf6d4d67bbc902d5d87e21d5014dfef02a0ddfcf1c2794a7f36129fc4792c4683b75b55c2f86d592cabe12c3878c82ed81a90f7e8b21e35a63a79998fff29c8244fce6730cd36400b062bf4e4697cd08474bef7185a15c3db88a5081871d679284ff917eda56f4baa9fa1ecaa233d64a8002589d8edd4087c66f58b6f1d3341a5b49396d40c425f372e6f8ab8aeb5cdfe29c364e6ebec6ca88209487156ff750e2175cdd8583a8df25d0d5be612af0437ba502f39858d30ce1de550a0bb11dc7edd22cd8191a6b4e684e3f688343e1218990d682d1127e0e84a9d1763fd903ca08ce3863d9f85f1d942c1e10c02f2c856a99d446be0c3f7d3fe35c46a091a80666faad4f46201aeeacf9e998f030c3e08ce8db4d868dcace75c1ef6f031249940e49a389c1054729745afaa8b187ceaf1b1e4131d428d9c4ccf918ebfb4b136e4ba63e19ed02e37c773e69ba048fbed4cfa07755d63f373adc846b724389d3b2355ae3b0018f2739317f592ca2c3b9dac5d6cb14c90534de7fcadecd869fdf59fcaea032df0aa1026edf16b1fc4da96f2dc7e3faedcf0361b64a1ab322bd2b876b5bee5a61a16ecb9902d21ae619d33b5030d9dca03e083534282367cb8b8a1c1c076fc7c93e3b3bfa4b285fea6376882c1f567f867461faf1da4e330134f19dadfe270667bc4a847c04d5156bd1fb5f1473e2e2f6970fbcb9407eeb3cb538740dbf2e6f2dc52250842b401a03f1fe175c9f4b3141a95b9aeca1d37f53de9a3ae08b768d1d03ef3226866c3e55b1d9f09b6438f7b2294009e20c76c6e6a47f2247492dd17b4ee696274bbad1d8d65ab14f5d2cafe2949eca322057037422e78d421d08331ed9140fb9fe596dc04279fdbf152a00d896361b9a5a7ba0bf672cf4507a33fb9a9f98ff9d918d6559098d60020b2d2c54c36504aa077715a399d0ed6b133befcd51d0b4c47598614af0c672d25acd74fbbddf2656e98359384dac583be2aeb33394f8b12f52f2c69aa2d60a1e75a5fea509c602aa530119331e7ed2d1658c9744ac68d3e1e985d91f5e13d33ae34c96c52d87d2a5118ceb856221dd76705168669e77348c8fffe0152cf9b31910b3c6c701d1042fd9354bcc21b8ece98978644cadf8c3e92c0a57c3340023cbb60d489f9b1274dcf7fdab18597be1bfd4c711f01246d536011d37f6132aeabc1c90ecdebbcc257983925b6280ddc1acfcac72cffc834bc41bb94833380374761d6a8fc0e9a78ad1a86d5d7f09d78846639eeb051fc0ab7594022d288e16471391ac0723746364f8b57c88b06d77d90641251b2f3740dc4213c27ca4616e9f8ee268112e058cad382fe7dcea1ea3fccdb50bce0323f610a6b016261df128712e06f678b96773777c0d1f79657afbd2b9bfa78509460c34e1c004fe67dc8eab9ab45f7a67470d1e1efb9ca8974be57e2e293ead3833f921d5782b7204589d720d504df1a66ed4ab5db0f6cb6ca04815bb89d77c05033ccc4f583820af43a9e40b4008ffd9aea8e99d38", 0x1000}, {&(0x7f0000003880)="b4d2ae22f2bd7505ea208f78b20d687c13b88f55a2b7bda9ffcfff16b5ec59ed2f8737aaeb8bbeb1010b5050b99e964c61983960f82eee1c2b9770ed989b0c27cd73e400ecab8792b01cce113de7c30e58fa73ec7e5b51144629a2b8ec5be9d2a8b05e91406327560a0a8ab0b387555f0a1fc63633f007b0ce0272fd9a16369e8cefb0bc971587ea431545", 0x8b}], 0x8, &(0x7f00000039c0)=[@sndrcv={0x30, 0x84, 0x1, {0x1000, 0x3ff, 0x8006, 0xfffffc3a, 0x9, 0x5, 0x4, 0x19, r4}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x9ff, 0x6, 0x4, 0x9, 0x8, 0x10001, 0x7, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @init={0x18, 0x84, 0x0, {0x81, 0x4, 0x3f, 0xff}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0xaf0}}], 0x118, 0x40}, {&(0x7f0000003b00)=@in6={0xa, 0x4e24, 0x20, @ipv4={[], [], @remote}, 0x2}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000003b40)="ea3410fc56fae73d59b80a6b04f8b69c5d1133cd1fa6d4ff7d65109f41b55ac521fb8b57c2cf627ff20511d3acc27eb2a47a43de0415156f04c5e440a3bceb73482b2986c22583c2d96690e7fef1822940be66d69bbf59ccfa5f0e98baf0216ba4850070f3912e31e25ffabb05e968247d9ff9b5ab4c5dc26e00e18b35f5f6a4cbaae1250f26082f05ac03a7607cdaa7bf14f549462f60968fc3f09f99c50d14776983d9aef210236e0965e9cb3a66168ea58d16dbbc554fbc2cd5b299989386a70aef2beb4f540595f43e83e0b44faa2490d63ccc02e4e00ffae8bea6ea89bc03bd34a0ba47acb918373f4d16c694a96e1339cb420e1378e0d2182ba2", 0xfd}], 0x1, 0x0, 0x0, 0x4000080}, {&(0x7f0000003c80)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000004000)=[{&(0x7f0000003cc0)="3cb7a71db9e28af74f03beb7b5b87a04a7f31aee39d9c8b20de98f009aa55fff5cd8f2635f", 0x25}, {&(0x7f0000003d00)="eeacbd76b068ca68a955d764fc755d0882e29b9383cda7df9610e6bf4361fa37e0545695cdededb827887cf1064306e6d5b0fad8f69c50dcb33e110610187cecf16d82bf60b0677b6b0de682d3bcc410cc11617fe5feea86ea70c902779f38ad53877b1411ba2a6e491109f7b32da31aa8", 0x71}, {&(0x7f0000003d80)="6bd5a764e51c1f636eea90fd013a0442b58c65047057d389cafdb86469b04d0ee250f9686621139aca915c0220c6e2cff1b82fc81b57a880d090867097709f", 0x3f}, {&(0x7f0000003dc0)="38f08d514b2a770790389936a47e", 0xe}, {&(0x7f0000003e00)="9daa", 0x2}, {&(0x7f0000003e40)="3e73b2ef4ff079127a7c1701aff9d67209f1d4169b813dcee777fc981a8138ac96582626db22e2942441765c0c8ea1a665e48f3d12e8540f395d5a7af8e5223ab8a22ccd1ea8c02c8a9ce14a014f16d44f31855a5e7ccad9", 0x58}, {&(0x7f0000003ec0)="13e38ec7821d5594c8578629561333fd8df9dde3411301ce5ea9a4127acbfcae238876bcc4aa8a5b5af10683f2c32695a81e28f959cafee54ad2f19423594c8ed185dcf2f34336060f4812e0470e71c9c2283a33749b382d140d3937b022cbd06269ce8443e00ee446a84d98c7b1b56df039654d785575dfde7390b97d148f53a1c9e3fcbb5ade86a5485027785fb5a9ce61e164bcf739145f1f8980c2bc7c7421bbc7b862b91c95a713558bf43bc2b7b437436455ff4963dddb9e447fa86ebb9be26449809699c810e29d661edde25fbb3f050af4af548c", 0xd8}, {&(0x7f0000003fc0)="ce9bac5b80c473d3224a15781d5a7f20fccdf00c75861d1fc7205d079c03cc2e79f519", 0x23}], 0x8, &(0x7f0000004080), 0x0, 0x4008804}], 0x6, 0x854) [ 1714.197226][T16789] ? trace_hardirqs_off_caller+0x55/0x230 [ 1714.202955][T16789] ? do_syscall_64+0x21/0x7d0 [ 1714.207644][T16789] do_syscall_64+0xf6/0x7d0 [ 1714.212244][T16789] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1714.218134][T16789] RIP: 0033:0x45ca29 [ 1714.222030][T16789] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1714.241721][T16789] RSP: 002b:00007f4c3ec87c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1714.250491][T16789] RAX: ffffffffffffffda RBX: 0000000000500f80 RCX: 000000000045ca29 [ 1714.258643][T16789] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 1714.266622][T16789] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1714.274774][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1714.282752][T16789] R13: 0000000000000a05 R14: 00000000004ccddd R15: 00007f4c3ec886d4 [ 1714.542061][T16796] device vlan2 entered promiscuous mode [ 1714.565498][T16796] device batadv0 entered promiscuous mode [ 1714.598894][T16796] device batadv0 left promiscuous mode 14:32:28 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1714.821862][T16760] lo speed is unknown, defaulting to 1000 [ 1714.856239][T16758] virt_wifi0 speed is unknown, defaulting to 1000 14:32:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1714.856253][ T27] audit: type=1804 audit(1589898748.610:753): pid=16816 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2628/cgroup.controllers" dev="sda1" ino=16170 res=1 14:32:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c056, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1715.415908][T16758] lo speed is unknown, defaulting to 1000 14:32:32 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:32 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c057, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r5, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="e98c8931f9e24814f3161ee336db64296faccfae574041d364b5ac625df2c655742ed2eda7b10d284d604155aa6d623fd8fafa0afbfa939742e6fae27a4e7691d72e39bc536cdcf791efd00ac7acfd400eebf41f0b222cf630e4727655", @ANYRES16, @ANYRES64=r3, @ANYRESHEX], 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b0001006257dbc2372321ffe92f0d02849e946964676500001400028005002684fc2b000008000500ee843342a0274ba0763695762c8b21f3178ff3ae24c42dbf68503e53b569365ef78fc28e366c7a05fdeccaf5f33d2777734dc408d309deaa37479371189c5854ea"], 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x80003, 0x200105) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000010000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000100000012800b00010062727964676500001400028005001900000000000800050000000100"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x2e}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x530}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1e59}]}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a48000100240248ff05000500120100"/46, 0x2e}, {&(0x7f0000000040)="e26b9b36543e6de6649fa8ae34fc29f14ba42c39b7a11f03c408122e4c72a784a07bd4945c", 0x25}], 0x2}, 0x0) 14:32:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x2, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1718.886733][ T27] audit: type=1804 audit(1589898752.640:754): pid=16900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2629/cgroup.controllers" dev="sda1" ino=16176 res=1 14:32:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c058, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1718.958535][T16906] device vlan2 entered promiscuous mode [ 1718.989991][T16906] device batadv0 entered promiscuous mode [ 1719.027929][T16906] device batadv0 left promiscuous mode 14:32:33 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1719.276154][T16909] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1719.298919][T16910] device vlan3 entered promiscuous mode [ 1719.305529][T16910] device batadv0 entered promiscuous mode [ 1719.339851][T16910] device batadv0 left promiscuous mode [ 1719.469774][ T27] audit: type=1804 audit(1589898753.230:755): pid=16931 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2630/cgroup.controllers" dev="sda1" ino=16176 res=1 [ 1719.602908][T16917] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1719.630344][T16920] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c059, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1719.660976][T16937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:33 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000a0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x44000800) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:32:33 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r1, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000000c0)={0x7, 0x8, 0x6, 0x3, 0x4}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) recvfrom(r2, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x3f77, {{0x2, 0x4e24, @broadcast}}}, 0x88) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x4}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x27638a76}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3f}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x20004001) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x101}, 0xc) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000140)="7980852a9cbc7fff4a940f9cf51c63a9ef1c95cb471a323a0f25865c3fb6877b3a2964ed032cb2294f077253774e85c3f553795bbefef5567a4c529687711abebfe95d8e23cd74406bda7df04942c454429710861b030a5e6d1c28608c4f10a19f7f489595a154cb8fa9bc627a47733e4b6e5233ab721720b62b0c72e8cee0677502c44efd1608814b44", 0x8a}, {&(0x7f0000000300)="b9d8e4e9b737fe88cae183be9f43fec82cb029f6bd609cd0d84ee04d2e7210cb01edcdcf9eb9e42a83fecfe47c15cb11defd5e9792f1ff2fca67090f8ebd722f603f0ebb55447ed0a74458b9fd0e82f3f9dc4834cbe513fa198795f2224d28a5803db049331614be080cf963981a5f384e9b25b5e10f61a53159a3f10f883b0424b8e2137e821fec064483f9575b07a708f66dae85063dbeb1f91b09e45932037e6abb915d20d32317c395f92eaf9c6e5f696af411ff794f34025bac670025f4492ec52530f910b0d88e13d8a800eef5", 0xd0}, {&(0x7f0000000200)="df789b0a6f51c597148c7fc179454784de4012c6e4172ff5b91eabe17df5feb103b45e8231c2277e19de3b5f87a4f888c23b603a58b2daee4ccf92c1a1d9b99653e1f63010011da7f575abd1b3cc6dc31a7df72ded6b935083f573e7dcc8d35b05a2d8b815d3e7352b69095edc7804f8bdf9631e25c94b84b20ff124509664c2679ece11eb2722698476a2a00403aa5dee92280353a080d86850386a08fa5662b6362604d8aebe45f2a287ae138b9edcc033cc0d6dae784657", 0xb9}], 0x3, 0x5) 14:32:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c05a, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1719.900641][T16946] device vlan2 entered promiscuous mode [ 1719.911650][T16946] device batadv0 entered promiscuous mode [ 1719.948166][T16946] device batadv0 left promiscuous mode 14:32:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160011030000000000000000fe8000000000000000000000000000bb00000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aca6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x4008) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r6, @ANYBLOB="000000298d46b199c6c23818"], 0x24}}, 0x0) 14:32:34 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c05b, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1720.413016][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1720.512091][ T27] audit: type=1804 audit(1589898754.270:756): pid=16980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2631/cgroup.controllers" dev="sda1" ino=16164 res=1 14:32:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c05c, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1720.562887][T16946] device vlan2 entered promiscuous mode [ 1720.596635][T16946] device batadv0 entered promiscuous mode [ 1720.641823][T16946] device batadv0 left promiscuous mode 14:32:34 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1720.922301][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1720.986541][ T27] audit: type=1804 audit(1589898754.740:757): pid=17009 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2632/cgroup.controllers" dev="sda1" ino=16164 res=1 14:32:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000c0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:34 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xd, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4000804) 14:32:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c05d, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={r2, 0x2f, "449d2f2ea49834e96c9b70051b29f78d023107c84af7c7d602b5226dc94d656f72e5cfbcab05349e4d6a2c5423a7eb"}, &(0x7f00000000c0)=0x37) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x90) 14:32:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c05e, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:35 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000400)={0x6, [0xfff, 0x0, 0x3f3, 0x0, 0xfffa, 0x7f]}, &(0x7f0000000440)=0x10) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r2 = socket(0x1000000010, 0x80002, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="12b9224122ed07f79df412e01154e0d174549b79907eb5844e8d2adb2d46d8d942be19d2efb1326cfa42df121f236abc436cd8e23e6268b90502a222e0e244902a8ebed32f180811a70a4f79ff063ea985575ea9d5838f4335eee3c93123f2e81db5", 0x62}, {&(0x7f0000000140)="9dc2b488a0de1784fd34af2c01809c6bd74d2c9d2a9e29a25501c12734dc9991f88a7573a78e0f6092bea436826f9f167a2c663af0fe8a50bbef03ebbf31795dd2852bd58abc19b9c31b57ae0df15d36b457935c2d78f42b52e475e5fa50a5980079dd5384ec32f1633fdcc4a9d3bec4b51d4115f1a0bf4a2dd41571d61676a79668a32e084c261262c0ac00cdd5d6990ff6684272a87ed9dc5c654f311dc1555988b2302667751f9045b14950c7e62256e76432b2fa23517bc374c46eee645b4700b842adec796863be2b4474cc1658e6302a7e80fc6b0c6776f1a25ab2836f86c0", 0xe2}, {&(0x7f0000000240)="86845af2418d3d338f4cb7dbf97ffc40e87984705b4ee8", 0x17}], 0x3, &(0x7f0000000300)="000568", 0x3, 0x20008040}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000800)) [ 1721.242686][T17032] device vlan2 entered promiscuous mode [ 1721.286051][T17032] device batadv0 entered promiscuous mode [ 1721.320570][T17032] device batadv0 left promiscuous mode 14:32:35 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1721.499286][T17048] syz-executor.3 uses old SIOCAX25GETINFO [ 1721.568040][ T27] audit: type=1804 audit(1589898755.330:758): pid=17047 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2633/cgroup.controllers" dev="sda1" ino=16164 res=1 14:32:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:35 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b1752ec44ce6cbcaaf6edc858d1dfafd79b588c2cf056eee71b1c73a76bf28d7ebab71fcf85d59a76178d3607fbc2115008991310206ef2e32d0fb2e814704babea3c94a33dfc76b4e37a5332a4eef2b3548fe3b96f518c8ef3307b0fa89337ba433d9af2e812c7f7fe70cea028347628e594cad00f910f932540b5c2660f39fad758cb8807147f8f0789fca15d84d412066e6c8bacb330d6ff0f2bfc7b56be898b10f68db4c5c4ff", 0xa9}, {&(0x7f0000000040)="4a7486cd98e82a76c182bdc2723dddb0d2d4783520fe", 0x16}, {&(0x7f0000000180)="e0f6aaa6aca840e036fb2c195855baa1ab1f2b9376636bab91dde3b582c30598bb1e8f7b862ce36e1e33ead0a646aa1762b4a1ffb71e79ec70ec5be82b752ba4e31726b10ab9533d44ed38eabb5c42041fd62f986d75d07e77171df476f86f86a51e58d6b90875a9c0d5e853e29e5086d2cde49b3caaca367b38386bd5", 0x7d}, {&(0x7f0000000300)="e416454b40ad21bd0e15cfa9d22c29c8c5d5cba879ad9b321795dbb4e6c16cc6014e71f8ba1279a96aa6404698ba605ed4f508a40d61512d1720f9dae837ace31bec4c36cc524bf3df2d29f037adeaeffade03ae5d6e5ef1b24266341ebc7b08ee0af2c78f6fe43a84b02bd6dd26df2de1ac4841ddc727794a51ea3fa22086434863732f6dede74e5c234cf0c54c71fb4d02ed0cfaa2929ffdaf66124df2ea9c9863d3ef1e122b3a73857c86a1ca346f0cfa7429963d2d42f7c938ca64382f189db31ae390054531f13ddff71fc76189833522cf78eb729cc335d717e2adda1d2b58", 0xe2}], 0x4}, 0x8890) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c05f, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1721.783052][T17032] device vlan2 entered promiscuous mode [ 1721.795583][T17032] device batadv0 entered promiscuous mode [ 1721.834372][T17032] device batadv0 left promiscuous mode 14:32:35 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1722.043363][ T27] audit: type=1804 audit(1589898755.800:759): pid=17068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2634/cgroup.controllers" dev="sda1" ino=16164 res=1 14:32:36 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000e0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3fb, 0x400, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0xd1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}}, 0x0) 14:32:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xa, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c060, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1722.374462][T17080] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1722.410549][T17080] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 14:32:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xb, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c061, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1722.568912][T17084] device vlan2 entered promiscuous mode [ 1722.605747][T17084] device batadv0 entered promiscuous mode [ 1722.662112][T17084] device batadv0 left promiscuous mode 14:32:36 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:36 executing program 3: socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000540)="1d3ff937052b5a74dbd6924b02279276241d5937c067dfc3d6adfeba5ab10ac87d1c55f9fd434f8a10c80d9ac7a5a9d901e20fb485c2c8e48b25", 0x3a}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="5ce758d776b441b2ae6b67cd15069cbc36bbb68293cc4dbeac21f9e7df9b6f2db805493cd4874091ffe2fecf835789a1d0ea0cedb84d08faad6bfd410ffc6c3a4a359e20f081a37ac95f927a4132dcffc3df596bc68acb13d44d2b078535816c55ae272935d83eb5f60078210b626a9f4f6a7f3ae3e0afd62224d44bdd23cef0b2b5f00d503ea9fce90d9c4f012d13a5d4c9a837340d9f0bce", 0x99}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="47d2271adafa0e88cf0428d66b9dc5e480f22db98984cbb38d84d431e21b74d7bae042889f81382af89227d5f479b56053e22fa11f5d841410b40d8d5553ec45e42ef60f3a14479bdcd43b8e187b341f7c1c2442ab320beaf0a629d91af8da07bdeebd1ce9ac29bf897078438b6f51ac1a7f9d4089e6215cf765cb2414cfb4f7d9c07508fe9be93884080b2ce91c2ebf6d44fdef53f389890c7a6b2adae118484c8680c8e01c8fde571c52347fd6dc1a331a34a73415db", 0xb7}, {&(0x7f0000001740)="311bef947713df1871050110250213d828383d1255cf47f3e989f308a0c5ffef6f13d48a3b8a662a642b4429d5c0e1a0b30d119275c7e40c10189b7264ce8a72d201fbe15c341a6c4e831c54aa898425f20fd2", 0x53}, {&(0x7f00000017c0)="bf8da1630788e93ca9cae0ee248b985d63c0b5478192c60d2b6b86dd0906a89c6b0b5f19fc9a4779ef4d560ce198b84f101418ded91c3790e0fdcfe509a8c45fe6f063f4fb90fc101552301bfa7c1c36ef00153f095913853a00002a11a8cd41e750a0ca774277cc140ac7753df6000000005ec49acdfaadbe54f58b93346af8e3b6e80e376e3055a1801ea1b311bc5e746fbad698e880393d1d7815b38b4e2200f1a21cc475ce718094186cc2292cc4", 0xb0}, {&(0x7f0000001880)="ef250267ee701206a176d8ecd27944531c035c", 0x13}, {&(0x7f00000018c0)="4670aad8e0ea76641bae743b6bfb73b55036a108dbe03d7467d96ea7c5b27e4be6f4295dfe629cab3fed69963a4dbddf827cbec05cae258ec8a0577792b37d52aab7aa4fd83649a3262794bf4a89b63f7ed4b8f6954b148ef7561c604beae0873625a2f0820243ef22faf299d957bc0b2c100a", 0x73}, {&(0x7f0000001940)="970e4c2e0d570413eed7b225e9bf04b74d2fea193a5f9956e0900880e9a47f47d0c373", 0x23}], 0xa, &(0x7f0000002040)=[@iv={0x100, 0x117, 0x2, 0xea, "db5d8939c993e1f739797775bef1f8d71ff63968949a7afcf3ea4fec19edba4091ec4b04c5a77b05d4b7f27727b2a350d2bda4604de51ca74e1a9894f090c287f62cda94fe5fb40eac7069e5a734c67b8c003158f6a84a89bc58eb3804f5b65ec831880fa012c2245682507f051f8be22db8435ffecb6a7483df86d84e1c8344c03bd0ff81246bbe9490ba0eed7da2cdb1661a9b5d72da4827ff7108592bb2609df8f481c0d082b13867f1d8948ae783c44594419e5879fb4892963b684a86141c69e2fffd1f6b0cf62eaa642df2c0b2c493473e3d62e6d1ce61f4fced7a358bd6777a9427ae64ac1b33"}, @iv={0xf8, 0x117, 0x2, 0xdf, "46eccbae655388f148eef4f7f9cb075ffae74c6e22fbed753dddaa9079bb55dae832f956623b9340722f4c0298937310056ae72476031b014dea8b110bc82908507d9a3e61d254ad8a0761f638abed0723c2b9a302d89fdc691b0ba7635aa1ed03b23fcea856ec3dcba09c5e4c3ae1281e00db8553756f4edf8b80cb1a1d8606fea275b3bebc1c430a0aa5db3f9087ee35752c624b59f670bb2adee33eb51ec1cf55c1613950848ad0476bb036ac7e84bcee2261cad3ddc48a37cc683bee970bc0192373a49a6a5aaca3fcf68c84f535b74a5ac935f06d2189cedd16f606d1"}, @iv={0x40, 0x117, 0x2, 0x2a, "595d54ca434e656bd973edbca36abbb59574b552ae95230c686fb2ed5671492eb2e3c2f504006548cfd9"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x268}, {0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c80)="612791911a1e8d8b52e9b026ca42dbf183c1526ba1e7951ba0c4c9b92f7c042b1542b51f6efd8b2c4c67c1761435815ed524e4f8d73f181f2d1b3f544c644b915964d7364c0f730b875e0453c223ec7d1f233adf7f7baa7cc6bbee8e9d57e220801ec3da15d5c1f9d220f520d2bebc0a09c8db7f6a1a063673c03f3462fec282c3bf10df5cceb6b83a918647e907aca7dc8d6378f97cd2a6af83574ced3bcd4fe43fdf", 0xa3}, {&(0x7f0000001d40)="1b54b34b377a229322ca850e13f3255473f38dc21fe254fbb33a", 0x1a}], 0x2, &(0x7f0000001dc0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xb0, 0x117, 0x2, 0x99, "77130d94ef398bfd52bd9dcf55ee2ba77f7735538d0f469cf0702ede8acecbad2272b2531a1717e9269182c425b6e99bd60c02d4f60c73870c5b66941f40b71688840ba6aefbda23d923b05af5d6d9fdcd90ad41d810efcd48994c4bc20e60768e4d76bb428efc14838162fa78a781f398ed8fc9a80d3ad0ff2c157ef7661ae7eebaa0ec3dd94758ce2f1817d2056eaa7276bd1161bafccdca"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc0, 0x117, 0x2, 0xa8, "48d2fe3d081a97d6d9bd57f454ec8a32430f87f05a7d953453700dca21061707bcbedcfc4a294ac2a78810f7980adb531dbfaa61c325f444280b1b85db3d3f17fb4472b326bcce970271a9118fde0e42da7af23037d3a01117f74486c1ad3a0fcff9bf8aecfcc36c0405aa6369e19073bb902444ed08b8c8badd5e56b14c261dad6346bdee0eed468f18a54ee35162801acfe6cf0d0f7ba66c2fa3b06f7d99df5bc9d68a12e0be74"}], 0x1d0, 0x40000}], 0x2, 0x4044810) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="a4b5ef0eb5f077629e3a1c5e1843ae51faa8d2cbcc87e907a6b27bb64b1346f712094171a8083e694b9d9db973600d6c8002982684c902a47bd0c4683aeaee48f5d978fd087b503db07e9cdd63be6fd8566dcf897dfb9c630999db381bbe3465a59f992f116049d9c03804a9b257aa24eec58686217ff70ba087609d854fe511e7c7b6ecd14b6d9fbc34e2af55f5b7ef25d2727debd9354bda319ac4c4258b9c1610ae3d"], 0xa4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf25310000000800db00", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0800b6a1", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x4c}}, 0x20000080) splice(r3, 0x0, r1, 0x0, 0xd86dac9, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB="000329bd70000adcdf2505000000050001000000000008000400ffffffff14000600"/47], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1230}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000fddbdf2507000000140900002001000000000000000000000000000108000c0002000000080004000300000014000500fe8000000000000000000000000000aa08000700000008000800020005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x8000) r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="5e715cdbea4bc29c149339212d658fb26944512696b75fb313011229900425333de8948dcd4cd304a5b9147c4153", 0x2e}, {&(0x7f0000000440)="f6fa83a3970446d9c3b49d6b31617de82a4d9d8e28d08283c17821b1fb01fc7174e4d1c614ad7ddd1c986eb0b62286123c9e5349fe7f66275f1a2ae65fc5a738cb5ad0b637e2af8dd9424bdd891e2a7dffd93315206a54a73d889fb53010be3cb51a652ce449a9f18ede3de16d66c3c1a8e5", 0x72}, {&(0x7f00000003c0)="40dc369d12d09f06727c3329d8d5ffffff7f00000000f01ab781d900b6627c35aafda120cb0f616be462691fe9472f8021c472dc31d110ba0e38cd2b1dae9fdaae458cf1377f2e7a08484361c092f3a7b0d95ad2c153dec29372522b9f8bf6", 0x5f}, {&(0x7f0000000140)="a6069bb232adf2e67a0867039e2efe763da223becd755d2c258421b517505c2cb6a2fec70da697c1e640866e7c171728f95c1949871a0b5b68bccbc06744b3e44395f25ca9bfc345d703d2b5bf2a9d689fb46e016b6634fa8ecd111b53109fd2678d7e7b94b83296a285", 0x6a}, {&(0x7f00000001c0)="488bf4ac60ca", 0x6}, {&(0x7f00000002c0)="c7c38bc31b9cac28106e2c1f1940f3b92b59bc0bd1aa25506f62a08bc1d0084317c6dd26f3acbcc62c3886ba387c7e57ff9321419514f6b634bc77cc1f33afb6e147b319cce098f08751e4c61b930b51f9d8c4bc4f4d15ef08f444d225841e9a53678ff69fb67c19a93dbce01ba57027b63508e5d8f9e9a5f7aae561d234095dc682f857d69103d513531f6a4ca21cacd84505ea49ccd154fc757022af9b5c3f440fe9843ff7e32152b8d4071804513de89a24c6a5c8a2c5ad174e7119d76a1a3aaa20d7cc88a221caa50922df06e2c8a261bd5b97c7008e39af593acfd63269b83ad29cfcc16a1fec57902d1d", 0xed}], 0x6}, 0x0) [ 1723.119642][T17080] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1723.152918][T17080] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 14:32:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c062, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1723.253911][T17084] device vlan2 entered promiscuous mode [ 1723.293220][T17084] device batadv0 entered promiscuous mode [ 1723.300596][ T27] audit: type=1804 audit(1589898757.061:760): pid=17114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2635/cgroup.controllers" dev="sda1" ino=16164 res=1 [ 1723.337047][T17084] device batadv0 left promiscuous mode 14:32:37 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1407, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7b}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x2, '\a\x00 '}, "ccbfc12abc282c27820fd9118600820e000600090000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000"}}}}, 0x87) 14:32:37 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1723.763202][ T27] audit: type=1804 audit(1589898757.521:761): pid=17132 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2636/cgroup.controllers" dev="sda1" ino=16164 res=1 14:32:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c063, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:37 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r4, 0x23f, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7010ffe9df26010000000000000001410000001800170000001f00007e0a7564703a73f97a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x20000000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000040)) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x200480d4) 14:32:37 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1724.232706][T17150] device vlan2 entered promiscuous mode [ 1724.265785][T17150] device batadv0 entered promiscuous mode 14:32:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c064, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1724.284167][ T27] audit: type=1804 audit(1589898758.041:762): pid=17151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2637/cgroup.controllers" dev="sda1" ino=16219 res=1 [ 1724.325741][T17150] device batadv0 left promiscuous mode 14:32:38 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x20, 0x0, 0x10000, 0x0, 0x400}) r1 = socket(0x27, 0x4, 0x5) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000020c0)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) r5 = socket(0x1000000010, 0x80002, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000034c010100000000000c00034000000000000000070c00024f000000000000ffbe"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000004c0)={0x8001, {{0xa, 0x4e22, 0x2, @empty, 0x9d}}, {{0xa, 0x4e24, 0xffffbe4d, @empty, 0x1}}}, 0x108) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = accept4(r4, &(0x7f0000000200)=@isdn, &(0x7f00000002c0)=0x80, 0x800) pwrite64(r7, &(0x7f00000003c0)="c386f681e81982ed899758ec40600981505c54f3cfd555da08656eaa0907db3406b0bca9ef0004636ffa1a9182dfa547a9e17425b64f441d689c6a53ff057fd9eeac73dd3e80e8c33d501be514a7a5c11c3f0729652f46e32c96ae265ad1e1f0a98c367654dffa860c012478e9e8a61eeed6f0f0ac3f8ddd6ac04bd500ddda21cce87dd7e05aef4877feda7d3d63e6f97448b7820ca542d99857ea43558a1b724848c243299928b18948dc35a9cad85d6146176a8efe7c3a6e16b72e650450794ac0610e536382acdb6e59b1bc3ac13e1fa7435f7102ae66a42840687b1295d7bc4da2b731ca5bd9eb30f2c2b4", 0xed, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000140)=""/117, &(0x7f00000001c0)=0x75) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x5, 0x0, 0x4}) 14:32:38 executing program 3: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x200000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000003f0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x11, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1724.864410][ T27] audit: type=1804 audit(1589898758.621:763): pid=17177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2638/cgroup.controllers" dev="sda1" ino=16215 res=1 14:32:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1724.976968][T17184] device vlan2 entered promiscuous mode [ 1725.004931][T17184] device batadv0 entered promiscuous mode [ 1725.042903][T17184] device batadv0 left promiscuous mode 14:32:38 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:38 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000029002908000000ff000000e4ffffff0000000c00", @ANYRES32=0x0, @ANYBLOB='\b\x00=\x00', @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0xffffff7f0e000000}, 0x24040881) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3e9, 0x500, 0x70bd2a, 0x25dfdbfb, {0x10, 0x1, 0x6, r1, 0x0, 0x5, 0xadfe, 0x0, 0x6}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040815}, 0x4040000) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08008200", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, r3, r7}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) [ 1725.274758][ T27] audit: type=1804 audit(1589898759.031:764): pid=17199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2639/cgroup.controllers" dev="sda1" ino=16214 res=1 [ 1725.330161][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:39 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x12, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf0ffff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1725.515063][T17184] device vlan2 entered promiscuous mode [ 1725.532748][T17184] device batadv0 entered promiscuous mode [ 1725.569972][T17184] device batadv0 left promiscuous mode [ 1725.592424][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:39 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1725.888578][ T27] audit: type=1804 audit(1589898759.651:765): pid=17235 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2640/cgroup.controllers" dev="sda1" ino=16214 res=1 [ 1725.980216][T17219] device vlan3 entered promiscuous mode [ 1725.985962][T17219] device batadv0 entered promiscuous mode [ 1726.052286][T17219] device batadv0 left promiscuous mode 14:32:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000014470000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x13, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:40 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:40 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = accept4$x25(r4, 0x0, &(0x7f0000001740), 0x80800) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1726.441710][T17258] device vlan2 entered promiscuous mode 14:32:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0xb6, 0xff, 0x8}]}, 0x10) 14:32:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x18, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1726.487150][T17258] device batadv0 entered promiscuous mode [ 1726.520224][T17258] device batadv0 left promiscuous mode 14:32:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1726.530228][ T27] audit: type=1804 audit(1589898760.291:766): pid=17263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2641/cgroup.controllers" dev="sda1" ino=15748 res=1 14:32:40 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x60, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:40 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getpeername$ax25(r1, &(0x7f00000000c0)={{}, [@remote, @default, @netrom, @default, @default, @netrom, @bcast, @bcast]}, &(0x7f0000000040)=0x48) 14:32:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000600000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1727.185717][ T27] audit: type=1804 audit(1589898760.941:767): pid=17291 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2642/cgroup.controllers" dev="sda1" ino=16194 res=1 14:32:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1727.333861][T17304] device vlan2 entered promiscuous mode 14:32:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1727.381777][T17304] device batadv0 entered promiscuous mode 14:32:41 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1727.432011][T17304] device batadv0 left promiscuous mode 14:32:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r6, 0x2f688245c11c0a37, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x60}}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008801}, 0x40) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r7, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1727.625549][ T27] audit: type=1804 audit(1589898761.381:768): pid=17314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2643/cgroup.controllers" dev="sda1" ino=15873 res=1 14:32:41 executing program 3: socket$kcm(0x10, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$isdn(0x22, 0x3, 0x2) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x80) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x0, 0x20000800) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf25310000000800db00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0800b6a1", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB], 0x4c}}, 0x20000080) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB="000329bd70000adcdf2505000000050001000000000008000400ffffffff14000600"/47], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0300ae3f", @ANYRES16=r4, @ANYBLOB="6fac2cbd7000fcdbdf250200000014000600fc00"/34], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000040)="8786ee236f9a879655f4ab4bf135d43907e7f82d75cdad914bc4b199bd488f76204a991dae846622190272ba3ed082361d", 0x31) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x20000000) 14:32:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000058650000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:41 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:41 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x111) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x9, 0x40, 0xfff8, 0x1]}, &(0x7f0000000100)=0xc) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x5) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 14:32:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x600, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:42 executing program 3: socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r3, 0x711}, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f0000002a00)={0x1454, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_PROBE_RESP={0x8cd, 0x91, "3ff7dfb9cb6b53d29d39ed80368130b488d4ae84d06569020aa4803b5370882f186474b25ded15b92da7a562b3003622189b19796be40cfb67b35d5927405b6622f3046b808260eb784cfedc6009e96a1163113246064475ddfc5a38465b18bf190c8919d321e813c08b931f3ce8f5013d84425b34ccba82b51b2edf56b9b156710d3fe2f728fa83c4d3c5db471e26a6d1e19fdbecaf097709c3b95132db7e6126ca0d622adaa1f56ca268bc0a3307de1fc926a52e1abcc304890d218d2902085d93c11936e99394179d5f55a44e91cf8bd07cb58ec946154399e61bcd34767132497d75b948d0ea2b52adb13c9060ac031b4d0e7a9f4f256144cf0cdfaaf10ddcaf8fb29a2a87f10fbe78fccbcaa6deed64066667a32e29a78dee9328b9d7d57d719e18897052833ce6dbc4f80bf3fd0e7452a101327316a155de395773c607cffae2c04a6038f220749b36cefa0d65fed512d6e955b0b750b96c5ea6411fc961706525d3c442620c019603ab3619555a23ef15099e49bc7494c5cb6c51e8b4bd9e4f78c1983c530157e0f0e548487001816493f34200d753f46ff017543013b459fe26fa1369c1f3c5bd8a69ccdfc7110d7a71d9b0db6f561a8b004b4c601977f2d7245b4fedcfa563825dc98f7dc87813e9fe54f5b8bebaacf79b28ea9507473966817bedb7ed169f41ee2ff58f22447dc72177c5be2f9ba8c0a5595290030e531879fce6f5fabfe74af3690d96e40c87325a87ecb6a28cf34c72d2886f3cb40d69fbad5de7624ffb119fd43107993e7449b58b6d0a6bae55d2a7456cdc140401bac2f50bdf3a4488d479f24b89f5033f5bb1917bcda10ce2a45a86cd1e4d5ddd8edd413d274ef13e39a3dfd6f5a89e0ff5368b3cc64d068d3de974336532bacfd64c031e5777641af678cba3740150d618bb5dce93a4075eb1083141af6b6405ece415532e792351d0cffa01bf4177c58b452c3f8847bd4efe03e5828cf8d39b264e93c1c39cfaea3ac8e9404d9e9eb94d0bf016d2a2ead343d8167ae6efd6b7f5e0274f787d927f883fb94e9166e8e71552308565c1b1cff173caae56b5ed51e0f1fb18ba2bd20465cbd86131afcd34f84793b8aaf984cc09d71d6b16f377cea169431b80cd3fec49f0c06357fb0c31c3f8c4f3722afb3616ded34aa239e3bcea03fe5c5836bd5c070f37a518e030520f34614431407e1394b423e35865a593f1f5db186cdc5f84df6f242dac0bb16443f5807066cedcdfd2625cb7ac721a3c277fa7ddbf0334e25136f5673173a60c70d87e7635f8cc43544deb91aa43fb3297631c95c0b418a3957f023ea7ad4076dcd639c60a7e3390b076101acb20b2ddeb5e0a6fa195495452a939ffd8e71cc3b130ecdd7e3830c0b5a71ad1f40b3dee320fa42d6ad3facbc429215febe8703a4be8232726cb7101709f93ea6245c0e70e10659a4759876e595b3fa97568c268c3b9a2d78811465d04b017397ba9a2a458539681884f5d062ad2679b348e0761cdf55efcd93a79368772db556a9f3572b23ee67ce188ca3d2446d4626de6b7abde62c8bc8cf3df7e026162c8a9263348cb0c1b563ff028c807fdc2bac765edd7ed79e191bbf9d0acf6b1f8936960181b60f05368d2b6caed7ea6936351ebe764f2b3ecb1486e58078a96a2d27c367560ce66e35db17981a1bd46997587ae8357e328dee937cc97bcfd1b4d208b058acf541e146114fcbd6c348f4d06c26930a813769ad1bda822863ec6dd9e3192b6f30fb44f4354e2532739814a8ed345e156a98fdd37d17132abd3f56ad0cb4fed5d1f603c51a14a1d41d16aa1522cd90b4b2c3a4feee105a785723fdecca14903e9b6577b667483fc8126eef065d81a62f0b0496a68237223a0df414c4d8a0a46fd42f445d6796bb9017641c16cbc53874bc5e2c44c3d9258bcb0eef42a185a38979dda7a83e85ef74449dbc39378765a2c8f5fc4c54fc3bd32a02469d9ae3f348f403195625ffae51a9cb6154f8f7691db1324e4c593ceece1cc52f0359d34a8d167f01045e806cb6016c23cbab2ac8885952fab149e2f8d1656e129f1da2c41754cbf414ac69751762b2149f92c3c69cdc5d58e7b30f0db8fcf9047f978dda65827ba545ad4f18b74bd332e0e12d79e27cb8d2b843c2126a7752513f4d2ce7779b9c6259debea15c72bd634127e0cc6ca33592646d0d4dbcdb8e2846c73dfb6f6aa37aaf0832a5af92eac3eb6b3be0cb419a234f99ea443b22840c0e570160895ff5476d43c1e3ee8c901a03835fa4591e5651c6ba2eb6d2aa1092c23b27c3a955b2a7c0ca5c501b217f0986a92dac2fc503fb103942fbcfcf461143f3c1a1ab28026e04c14acc9e70407bf9d68b5a101859f2d6e9cd8316d8c780c80efc4e9431afaa1c54e5e0b1127a0b45e1c54e086332fad9c39c784cdc2798ae5e0e6f55491b085ea05c7f89413189bf157c8032eee2e51fc449643472823b5b2594557c9be183e6131fadd5a3662f498e45f41990c146c9dc92df9150b5f06aa4488376d8dafebdcfebec3e3ed0e9a9aa255265ba197af5d6a83a712e378f6bf1708db1ae848ba3b438e410f5d05e847d6a387ca6d44086799a5b198bf0c4a6f496ab21b6968e689dcf1cc7d3372ce932a526cb225dc8c48466eca11de34d16c87235764f222b7beb6bf2d3e94435b58fdbdc867d0ab195d114c4a73f1f6bc39b396c47954cca5258690b0e2eae5c6ed599f0acafbea8e04bf384da92851554aa8aeb2e3f6ca75a7d956daa7af4de5c8d4770fae26df46df58a61abb001ccbccb955eb7d60aeb396fa310bcea8850c025b3b1384b35575d5adc3f999b97cf149318b57445f8390b0f72ab0e0fe3e734429eb216beea2ded1301edcaaac279891cd8c31a8891c5954a3948d10d8471ab857cd0dcc9c39c4890c8bd419c4170075c6e3ca721ae3e275f4bbf9d2332c7223fc80d6a0f077c3eb2b1e1d10a0a4ff60247cfbaf85c29fdd59241a6ecced1a5d46e7927da994ed23ab029941a24766a162a2cb25784a7a78335b36f5e7124650784ded8bbd19698792928de52119afcf38b4b4729e7a9b9c886c45791f30ac70f8bf4bdd1b88c644cac942d822aacb37036134091f72beca23fd2016aac9898b45ed4098491336189247807cb1dc7097440e0c6bd9a2eceba45958"}, @NL80211_ATTR_TX_RATES={0x32c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, [@NL80211_TXRATE_HT={0x38, 0x2, "b147c5b72d002fbdc4491c76ed93ab94a28a8277abfda0791a59ffd38ddce38df22d8928973d580abf6309122f3c658f672d2f3b"}, @NL80211_TXRATE_HT={0xa, 0x2, "ad1364d837b9"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3f, 0x5, 0x6, 0x7fff, 0x401, 0x3, 0x1000]}}, @NL80211_TXRATE_HT={0x6, 0x2, 'Ts'}, @NL80211_TXRATE_LEGACY={0x14, 0x1, "c4f15f690a523925cdd2985fe57e541f"}]}, @NL80211_BAND_60GHZ={0x114, 0x2, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, "fbda6d196eded25d595368d6d37854ac16d3a1eaeb09608672bf7e22b7a7"}, @NL80211_TXRATE_HT={0x13, 0x2, "6a9ff5dbaadbb4460212a236964676"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x7, 0x800, 0x0, 0x4, 0x8000, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "f46bf5a508623837d87599"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x2, 0x200, 0x6, 0x5, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x42, 0x2, "7f6f668886527031dabd093a4930a74c9ecf761c7e3cf97d4e330bf70b9fee67db09d5fdd097aefc66a6380b1594dc3ee072a1e1567f135ab6e93914b54d"}, @NL80211_TXRATE_HT={0x3d, 0x2, "f3f2f8d08d4a9ed96523a93be3940f713d321cd650bd1702606a2d08b789bf383797ff0914c2b3257b0c260971f10e9f241e4602fe9863116d"}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "59f11e7d77b687aa9e4fb2a8ec"}]}, @NL80211_BAND_2GHZ={0xec, 0x0, [@NL80211_TXRATE_LEGACY={0x7, 0x1, "e001ce"}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "7fca34e4428eeb6a85036e6e03e456853c595ca7d1f2a0c8e6dd6d28854933"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "6023ee606fe3f61191ccae5e9c280f4b2388647e65a5a72e6fdc6d21097f15"}, @NL80211_TXRATE_HT={0x46, 0x2, "ed7ad5d9cbfa4049112ecea702011a4dbbc3b12dae7f1d30605c3c04bd5ee3e6cb9ed88108af484aff98dc72c71304df8123fbd517a2e78499f8079713192c7ca3ca"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x6, 0x0, 0x471d, 0x4, 0xfffc, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x7fff, 0x8, 0x5, 0xff, 0xa60]}}, @NL80211_TXRATE_HT={0x20, 0x2, "6954aea3539bdd3082b5c51e90872df34bbb74c8a2b94bc865d1c31b"}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, "8c4989438857d7cacf2beb187633f543c0908f928175a48bffae65328d541abb1e072b8b5627269fbb892897c153b34c441ec9cd8951d5e3ef2602c773fc889fd09e38205091b18ff5"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xfffe, 0x1, 0x8, 0xb76, 0x18, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x100, 0x1, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, "0dc4b504f7404a690d97351642855ac4f5174d33"}]}, @NL80211_BAND_5GHZ={0xc, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x28, 0x49, [0xfac05, 0xfac06, 0xfac00, 0xfac0b, 0x14720b, 0xfac0c, 0xfac04, 0xfac06, 0x147201]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BEACON_HEAD={0x7fd, 0xe, "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"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1454}, 0x1, 0x0, 0x0, 0x85}, 0x26008045) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffd39, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00d5ad920700dd52c6554ea2c996c8be7e2c75077362e976e10340337f0cfb80869eb42b", 0x23}], 0x1}, 0x4004804) [ 1728.303074][T17350] device vlan2 entered promiscuous mode [ 1728.328255][T17350] device batadv0 entered promiscuous mode [ 1728.368192][ T27] audit: type=1804 audit(1589898762.131:769): pid=17356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2644/cgroup.controllers" dev="sda1" ino=15777 res=1 [ 1728.397260][T17350] device batadv0 left promiscuous mode 14:32:42 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 14:32:42 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 14:32:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x612, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1728.890070][ T27] audit: type=1804 audit(1589898762.651:770): pid=17373 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2645/cgroup.controllers" dev="sda1" ino=15986 res=1 14:32:42 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000810000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:42 executing program 3: socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:42 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 14:32:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x900, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1729.149675][T17388] device vlan2 entered promiscuous mode [ 1729.165279][T17388] device batadv0 entered promiscuous mode 14:32:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1729.197226][T17388] device batadv0 left promiscuous mode [ 1729.214862][ T27] audit: type=1804 audit(1589898762.971:771): pid=17394 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2646/cgroup.controllers" dev="sda1" ino=16018 res=1 14:32:43 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 1729.502231][ T27] audit: type=1804 audit(1589898763.261:772): pid=17402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2647/cgroup.controllers" dev="sda1" ino=16018 res=1 14:32:43 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 14:32:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1729.768433][T17388] device vlan2 entered promiscuous mode [ 1729.797357][T17388] device batadv0 entered promiscuous mode [ 1729.834043][T17388] device batadv0 left promiscuous mode [ 1729.876028][ T27] audit: type=1804 audit(1589898763.631:773): pid=17413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2648/cgroup.controllers" dev="sda1" ino=15973 res=1 14:32:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:44 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'vlan0\x00', {0x8}, 0x7a}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000000c0)) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r4, 0x180000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4607027fffb00000000000000002000600240100005403000000000000400000000000000014020000000000002607000001003800020020003f00010000000070331b0000010100000000000002000000000000000700000000000000040000000000000000000000000000000300000000000000b740e3ce3e431f14831e652ab6d760fb91eb19e5579404aec0c8384cfbb3dca690133b0be7aa844da9594234a306ab44b01e4b8f63e8a791d7540d17b084ffe16ea72807f5fe64eb41527cd4fae61f030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/968], 0x3c8) 14:32:44 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 14:32:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xb00, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000ffffa8880000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1730.345131][T17431] device vlan2 entered promiscuous mode [ 1730.360545][T17431] device batadv0 entered promiscuous mode [ 1730.404099][ T27] audit: type=1804 audit(1589898764.161:774): pid=17432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2649/cgroup.controllers" dev="sda1" ino=16224 res=1 [ 1730.429789][T17431] device batadv0 left promiscuous mode 14:32:44 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 14:32:44 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 1730.709866][ T27] audit: type=1804 audit(1589898764.471:775): pid=17446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2650/cgroup.controllers" dev="sda1" ino=16224 res=1 14:32:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:44 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e000f0010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x183}, 0x24000080) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r2, 0x0, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 14:32:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000180)=0xcf, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @remote}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}, 0x0, 0x4, [{{0xa, 0x4e23, 0x6, @remote, 0x1ff}}, {{0xa, 0x4e22, 0x800, @mcast2, 0x80}}, {{0xa, 0x0, 0x92, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4083}}, {{0xa, 0x4e23, 0x6, @local, 0x200}}]}, 0x290) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480), 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x1e}, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x400, [0x1, 0x3f, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x10001]}, 0x5c) [ 1730.910063][T17431] device vlan2 entered promiscuous mode 14:32:44 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 1730.944186][ T27] audit: type=1804 audit(1589898764.701:776): pid=17456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2651/cgroup.controllers" dev="sda1" ino=15690 res=1 [ 1730.995599][T17431] device batadv0 entered promiscuous mode [ 1731.050079][T17431] device batadv0 left promiscuous mode 14:32:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$kcm(r2, &(0x7f0000001a40)={&(0x7f0000001380)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)="5beb7744b2627ed643f0d6005610e681dc0d965cfb54c8ec41a13b62505a512d062d74489d14f511756358672e9471c327e4553abd10f37b27f09e02de12f46fdb15873a39a59969a58ee7f1d61a8aa3cd8f523be22e4f7de32d0da61d1867263ced34d10d53f6ae48594b846977283b25b180bb94f34d0b8432ef0fac834534c63735520014ee95c5792733aecfa7b992297e410bf176cabb99481400d66a9dc6e6d3b614897f2a7df879b859c79693b7aef67b8bdf669ecb237dd2f51cb055907d59a2cc44cd3d252a334af34a13f8cd6b6698b040cb61b212034b", 0xdc}, {&(0x7f0000001500)="0eb67910a68b656bbea74aa6b3b597edb9006f77350924480c94170fa5de23461b31d7e47ea2e2e9f9e78cf73dbb7cfb557018ad6efbc73a24c53b935d229b9de5adf675927fc40b907569fd888773e63e920a491cbaf0584e", 0x59}, {&(0x7f0000001580)="0698eb77ee6321b5a2bd5aa809cfb358d855b75f5db262cf71843d7d669e0555d8506a88572df2defeb30d3806651013b6420974ac49dfea7b11e2c405c14e9019c28ec1351f6265c36eaded0bfce9839a4e2d3e530c87d50056f1ad4df339c56e7362fd0c4483af0aabc5fa418c0791ed60b14c66614deb1b63706fa380f3e45437e80fccca31c419c938426fd2bc609a5909a839882f540c9fed1c7740e0794c27108ba72619ec6ed7b5b380380e80c7d8e5fe26595931b1", 0xb9}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000001640)="7ff3dd20454c280f21d45c05c677911173f1bfca6cdf063adb81da37b7cb2c5b0c2bbacf4d302c3e4acf78ffe8a9b94aa297cb863760d8226e952f6e339e5c68f55a24725494d568637bacefb94a19d2bc342bc0056ef58b33d642f40fc677d6d19f503e0b9fe9682ddd330e7931cfc70497e254681b3b8358ca2c1024cb5d7f9ad3342c9f14739c58ec8e4d934e53c85cad79cfd36a12c920cdab28455c5d289a0e8b1b30f661d3c827b508db0f4fe502066f7ee242", 0xb6}], 0x5, &(0x7f0000001780)=[{0x18, 0x118, 0x4e6, "65f8166048e36539"}, {0x98, 0x109, 0x800, "a293c0458cb0e63553a4a4bc9eb9752aa3cfe9fd87422bfc88b58f1953d0dbfece65f036008a78cdb74f5d419b4988d11265c89d9bcd79bc0e3f09394c7e2288ecd6e4a81e511c408949f446ba205fdc9be5cba33dfc74e454f87c365af572b73b857034eac8e3f1e49d7828f4a71c332d90784fe670768cda304bad728303309bee68f0de"}, {0x30, 0x114, 0x10000, "e40495a1cfdf3c1b160c4796523f0a1a5114739d9024335925"}, {0xb8, 0xb, 0x20, "ebb01f07a241f5061b983e106989df9d99e8c155f79374c5c252d0d4b8cdbcab77669e1499ad81c674cf35ca8fb1a6c7fcd1044e8c2e6dc0b452829da3a3774d158291541c653280db7fe26f3302c087987d9b12d74db5e5ab127b66435b47fcaad8c534bb9a41e9c80fdedb6983cc4a6eede9bbdb11d7e5631a52f8f0633887064d2d7b9ac33aad952080062e3509f0baf38c997471fe059aaa479a38ad8a5b3b2b36be21cb63ee"}, {0xf8, 0x10d, 0x9, "12ae30f062f252c191052c45df78fa209eed120d289a06656454ac1f7c74bd935760356165fa025184fbf83fade5758c9cbaabd1b031f1adfb9a0b69463886e021b70a03fbcebd4028efba908527f24ae18a9df7cc48e28a35885c8c05d6114e2ccbf65c8c0ed8d7cc69d16ff8d529cdbe034a065aeb9b94f22113c36da614a543d22312df518d7867181ff7cce24a559c305eb0f9cb404f26b7c943b7eaea6d6e1fa2b0b48649372c5c3f076cd350b94a473b1ca9130e462106817352a9d073ff7a3d97aa91cfcb164d594bc50bec93c6d5fee09a70257b9a28f4916b9d801dad765f"}], 0x290}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) sendmmsg(r3, &(0x7f0000002680)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000040)="91c9e34aff0894fe0885d9621718aea77b888fda019026b7bf0d5a37579b9b33ac0def8265d4463ed15a1d64ea7201794369e29244dfbc89b35bcc", 0x3b}, {&(0x7f0000000140)="7fef977c473da0955c6d90d57c1d42499208bb777b015fdc5f9c3faa35f6d0e08e75de7a87edc422bbc2fa6070757c876f010004ebd93df465b3240ba0b5d789647028b55f3bb1feed9caa4da32b9af2803c0f4bd17938fc8b2e697ab1700a8d8b7a38690bd96438b47fb348249a1f1d4e05a2e3e95ea2b528a26d0d687c254f02aadc6712b26a86da91bb63ff12d51f9c5882220992f7c340", 0x99}, {&(0x7f0000000200)="e6b529c7c272858079cdb15cb3dd00fd25560879b474c6ed1412ba1419d8a5cd20c95a9c2ba7fbec3373aa22f693c3af617c9f55495e2b2c182ec0fc60c20740de2288577de59a54bf0e7808ee", 0x4d}], 0x4}}, {{&(0x7f0000001300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x0, 0x2, 0x2, 0x2}}, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002500)=[{0x68, 0x119, 0x800, "04526b621197744b51db2c378ab4561e2f3656d6d40bc0405eb25bf46291e8a67da6adc2cf7d85a927f4197b8e2fffeaa382821cd17f825cd2d534c1f9f9849c009c356b734f0b1fd351957bfb9ab32de5b2fff7116386"}, {0xf8, 0x115, 0xdaea, "eef6ef598a76ce1b61dbf6a82105aed3725899dc4f75d41a6b47fba9ce46a6728c6f54895ee3b20407d47fe44653152184f9b9e66e5128f7c590db2840d5bef67b88231db1c3dc03e89d52da078b26329bed6c4d9cb0d71e70df24684e7860ab9888b60b6635c4ee485490f4ee74ef3aa97c4c5f204597f2499fce5b7c1c41f5b6845a089d48b5b27bbba26f65a0ef952ae6ae05807ca88cc94ce789f404cef3f555ff109ed311321234667bd32c0d1c9fde71f3e3a999299dfc7370f2208ab3452fd1d41b81cdb2d511ca99d978cde21fefa915cce51952b625755a44572c5238ee4f50ac293198"}], 0x160}}], 0x2, 0x20004080) [ 1731.258991][ T27] audit: type=1804 audit(1589898765.021:777): pid=17477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2652/cgroup.controllers" dev="sda1" ino=15938 res=1 14:32:45 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 14:32:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xe00, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:45 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000240012800b000100627269caccd91b51d51e44028c4067646765000014000280055300000000080005000000010000"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', r5}) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xff, 0x8001, 0x2}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0x7f}}}, 0x84) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)=']\x00', 0x2) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f00000000c0)={0x3, {{0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, [], 0x1}, 0xff}}}, 0x88) 14:32:45 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000ffffff9e0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1731.593891][ T27] audit: type=1804 audit(1589898765.351:778): pid=17486 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2653/cgroup.controllers" dev="sda1" ino=15889 res=1 14:32:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1731.711176][T17494] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:45 executing program 2 (fault-call:15 fault-nth:0): pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1731.823562][T17498] device vlan2 entered promiscuous mode [ 1731.857446][T17498] device batadv0 entered promiscuous mode [ 1731.894961][T17498] device batadv0 left promiscuous mode [ 1731.994796][ T27] audit: type=1804 audit(1589898765.751:779): pid=17509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2654/cgroup.controllers" dev="sda1" ino=16224 res=1 [ 1732.035588][T17509] FAULT_INJECTION: forcing a failure. [ 1732.035588][T17509] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.081456][T17509] CPU: 1 PID: 17509 Comm: syz-executor.2 Not tainted 5.7.0-rc5-syzkaller #0 [ 1732.090691][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.100852][T17509] Call Trace: [ 1732.104175][T17509] dump_stack+0x188/0x20d [ 1732.108536][T17509] should_fail.cold+0x5/0xa [ 1732.113250][T17509] ? lock_downgrade+0x840/0x840 [ 1732.118125][T17509] ? fault_create_debugfs_attr+0x140/0x140 [ 1732.124763][T17509] should_failslab+0x5/0xf [ 1732.129775][T17509] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1732.135271][T17509] ? aa_file_perm+0x5be/0x14d0 [ 1732.140853][T17509] ? __lock_acquire+0xcbb/0x4c50 [ 1732.145815][T17509] alloc_pipe_info+0x10a/0x4f0 [ 1732.151613][T17509] splice_direct_to_actor+0x777/0x980 [ 1732.157274][T17509] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1732.163313][T17509] ? do_splice_to+0x160/0x160 [ 1732.168141][T17509] do_splice_direct+0x1b4/0x280 [ 1732.173102][T17509] ? splice_direct_to_actor+0x980/0x980 [ 1732.179204][T17509] do_sendfile+0x555/0xc50 [ 1732.183649][T17509] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1732.188974][T17509] ? wait_for_completion+0x270/0x270 [ 1732.194301][T17509] ? __sb_end_write+0x101/0x1d0 [ 1732.199167][T17509] ? vfs_write+0x161/0x5d0 [ 1732.203611][T17509] __x64_sys_sendfile64+0x1cc/0x210 [ 1732.208821][T17509] ? ksys_write+0x1a5/0x250 [ 1732.213330][T17509] ? __ia32_sys_sendfile+0x220/0x220 [ 1732.218618][T17509] ? __ia32_sys_clock_settime+0x260/0x260 [ 1732.224435][T17509] ? trace_hardirqs_off_caller+0x55/0x230 [ 1732.230253][T17509] do_syscall_64+0xf6/0x7d0 [ 1732.234758][T17509] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1732.240646][T17509] RIP: 0033:0x45ca29 [ 1732.244539][T17509] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1732.264139][T17509] RSP: 002b:00007f5477250c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1732.272849][T17509] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 1732.281441][T17509] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1732.289901][T17509] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1732.297954][T17509] R10: 0000000100000002 R11: 0000000000000246 R12: 000000000000000d [ 1732.305929][T17509] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007f54772516d4 14:32:46 executing program 2 (fault-call:15 fault-nth:1): pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:46 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000006b00)={0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000006b40)={r2, 0x401, 0x2, "0dd8b1db497a7a854e8373820d75aa604ab9be49b0dc3111cfb77cfea0d73e08d8705a85c48f1d3bcf2e18cb9ebd62bbe163fc0e4385d6eec3e9ce9bc967ee04ef86ea78a4f3ff5e5758c5e880db0387262bf6885b76316635d933deb5a2fa1e200ec4434ecbe65a67a752"}) [ 1732.353275][T17501] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000180)=0xcf, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @remote}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}, 0x0, 0x4, [{{0xa, 0x4e23, 0x6, @remote, 0x1ff}}, {{0xa, 0x4e22, 0x800, @mcast2, 0x80}}, {{0xa, 0x0, 0x92, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4083}}, {{0xa, 0x4e23, 0x6, @local, 0x200}}]}, 0x290) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480), 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x1e}, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x400, [0x1, 0x3f, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x10001]}, 0x5c) 14:32:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x6000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1100, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000fffffff00000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000440)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x0}}]}]}, 0x2c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'macsec0\x00', {}, 0x8001}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x10000010}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) [ 1732.594604][ T27] audit: type=1804 audit(1589898766.351:780): pid=17523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2655/cgroup.controllers" dev="sda1" ino=15762 res=1 [ 1732.633345][T17523] FAULT_INJECTION: forcing a failure. [ 1732.633345][T17523] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.662109][T17531] device vlan2 entered promiscuous mode [ 1732.700686][T17531] device batadv0 entered promiscuous mode [ 1732.720958][T17523] CPU: 1 PID: 17523 Comm: syz-executor.2 Not tainted 5.7.0-rc5-syzkaller #0 [ 1732.729924][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.740599][T17523] Call Trace: [ 1732.744343][T17523] dump_stack+0x188/0x20d [ 1732.749039][T17523] should_fail.cold+0x5/0xa [ 1732.754276][T17523] ? lock_downgrade+0x840/0x840 [ 1732.759149][T17523] ? fault_create_debugfs_attr+0x140/0x140 [ 1732.765789][T17523] should_failslab+0x5/0xf [ 1732.770653][T17523] __kmalloc+0x2d9/0x7a0 [ 1732.775351][T17523] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 1732.780916][T17523] ? alloc_pipe_info+0x1e0/0x4f0 [ 1732.786166][T17523] ? aa_file_perm+0x5be/0x14d0 [ 1732.790962][T17523] ? __lock_acquire+0xcbb/0x4c50 [ 1732.796486][T17523] alloc_pipe_info+0x1e0/0x4f0 [ 1732.801380][T17523] splice_direct_to_actor+0x777/0x980 [ 1732.807477][T17523] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1732.813130][T17523] ? do_splice_to+0x160/0x160 [ 1732.817945][T17523] do_splice_direct+0x1b4/0x280 [ 1732.822984][T17523] ? splice_direct_to_actor+0x980/0x980 [ 1732.828651][T17523] do_sendfile+0x555/0xc50 [ 1732.833456][T17523] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1732.839196][T17523] ? wait_for_completion+0x270/0x270 [ 1732.844597][T17523] ? __sb_end_write+0x101/0x1d0 [ 1732.849642][T17523] ? vfs_write+0x161/0x5d0 [ 1732.854176][T17523] __x64_sys_sendfile64+0x1cc/0x210 [ 1732.859584][T17523] ? ksys_write+0x1a5/0x250 [ 1732.864189][T17523] ? __ia32_sys_sendfile+0x220/0x220 [ 1732.869759][T17523] ? __ia32_sys_clock_settime+0x260/0x260 [ 1732.875847][T17523] ? trace_hardirqs_off_caller+0x55/0x230 [ 1732.881933][T17523] do_syscall_64+0xf6/0x7d0 [ 1732.886452][T17523] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1732.892348][T17523] RIP: 0033:0x45ca29 [ 1732.896250][T17523] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1732.916379][T17523] RSP: 002b:00007f5477250c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1732.924796][T17523] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 1732.932951][T17523] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1732.941043][T17523] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 14:32:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x6c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1732.949571][T17523] R10: 0000000100000002 R11: 0000000000000246 R12: 000000000000000d [ 1732.957589][T17523] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007f54772516d4 [ 1732.971640][T17531] device batadv0 left promiscuous mode 14:32:46 executing program 2 (fault-call:15 fault-nth:2): pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1733.149116][ T27] audit: type=1804 audit(1589898766.911:781): pid=17553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2656/cgroup.controllers" dev="sda1" ino=15905 res=1 [ 1733.189595][T17553] FAULT_INJECTION: forcing a failure. [ 1733.189595][T17553] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.204350][T17553] CPU: 1 PID: 17553 Comm: syz-executor.2 Not tainted 5.7.0-rc5-syzkaller #0 [ 1733.213040][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.223101][T17553] Call Trace: [ 1733.226422][T17553] dump_stack+0x188/0x20d [ 1733.230769][T17553] should_fail.cold+0x5/0xa [ 1733.235291][T17553] ? fault_create_debugfs_attr+0x140/0x140 [ 1733.241724][T17553] should_failslab+0x5/0xf [ 1733.246149][T17553] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1733.251589][T17553] iomap_dio_rw+0x27f/0x1140 [ 1733.256190][T17553] ? lock_release+0x800/0x800 [ 1733.260882][T17553] ? iomap_dio_complete+0x770/0x770 [ 1733.266090][T17553] ? down_read+0x110/0x420 [ 1733.270512][T17553] ? down_read_killable+0x460/0x460 [ 1733.275826][T17553] ? ext4_file_read_iter+0x444/0x600 [ 1733.281127][T17553] ext4_file_read_iter+0x444/0x600 [ 1733.286286][T17553] generic_file_splice_read+0x479/0x780 [ 1733.291959][T17553] ? add_to_pipe+0x3a0/0x3a0 [ 1733.296571][T17553] ? add_to_pipe+0x3a0/0x3a0 [ 1733.301183][T17553] do_splice_to+0x114/0x160 [ 1733.305691][T17553] splice_direct_to_actor+0x307/0x980 [ 1733.311063][T17553] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1733.316603][T17553] ? do_splice_to+0x160/0x160 [ 1733.321297][T17553] do_splice_direct+0x1b4/0x280 [ 1733.326311][T17553] ? splice_direct_to_actor+0x980/0x980 [ 1733.331942][T17553] do_sendfile+0x555/0xc50 [ 1733.336349][T17553] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1733.341630][T17553] ? wait_for_completion+0x270/0x270 [ 1733.346922][T17553] ? __sb_end_write+0x101/0x1d0 [ 1733.351782][T17553] ? vfs_write+0x161/0x5d0 [ 1733.356212][T17553] __x64_sys_sendfile64+0x1cc/0x210 [ 1733.361394][T17553] ? ksys_write+0x1a5/0x250 [ 1733.366660][T17553] ? __ia32_sys_sendfile+0x220/0x220 [ 1733.371926][T17553] ? __ia32_sys_clock_settime+0x260/0x260 [ 1733.377626][T17553] ? trace_hardirqs_off_caller+0x55/0x230 [ 1733.383594][T17553] do_syscall_64+0xf6/0x7d0 [ 1733.388188][T17553] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1733.395303][T17553] RIP: 0033:0x45ca29 [ 1733.399236][T17553] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1733.419251][T17553] RSP: 002b:00007f5477250c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1733.427657][T17553] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 1733.435612][T17553] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1733.443678][T17553] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1733.451660][T17553] R10: 0000000100000002 R11: 0000000000000246 R12: 000000000000000d [ 1733.459804][T17553] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007f54772516d4 14:32:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1200, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000088a8ffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:47 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) accept$ax25(r4, &(0x7f0000000180)={{0x3, @null}, [@bcast, @default, @bcast, @rose, @remote, @bcast, @rose, @null]}, &(0x7f0000000200)=0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x7000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1206, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000180)=0xcf, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @remote}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}, 0x0, 0x4, [{{0xa, 0x4e23, 0x6, @remote, 0x1ff}}, {{0xa, 0x4e22, 0x800, @mcast2, 0x80}}, {{0xa, 0x0, 0x92, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4083}}, {{0xa, 0x4e23, 0x6, @local, 0x200}}]}, 0x290) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480), 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x1e}, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x400, [0x1, 0x3f, 0xffffffff, 0x7fffffff, 0x1, 0x8, 0x0, 0x10001]}, 0x5c) [ 1733.737856][T17569] device vlan2 entered promiscuous mode [ 1733.755371][T17569] device batadv0 entered promiscuous mode [ 1733.775950][T17569] device batadv0 left promiscuous mode 14:32:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1300, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:47 executing program 3: socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 14:32:47 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:32:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x7c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:48 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x464, 0x400, 0x70bd2b, 0x25dfdbfb, "606a9f2e33c67f0f210dc9c92fef9ffe6e713d7ae1beca05ab9728658c18e49000d62e64bdf250dcb171e027745acf769150d467c22ecf6065eb8cfd", ["", "", "", "", "", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) [ 1734.349787][T17597] device vlan2 entered promiscuous mode [ 1734.376863][T17597] device batadv0 entered promiscuous mode [ 1734.415850][T17597] device batadv0 left promiscuous mode 14:32:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1bf0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x8000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1734.850662][T17597] device vlan2 entered promiscuous mode [ 1734.885815][T17597] device batadv0 entered promiscuous mode [ 1734.953589][T17597] device batadv0 left promiscuous mode 14:32:48 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000003b5f4cecba0737f6a7c8e89c2845bd371cdc1e06834e2bce637a118add8497959cbab4ca37a52bfba815365051b4ac49a7b0871601d4dae18eb567649b846555e4659aca4bc9a9206c416b137cbf2792415205264588886a81a99477467f77281b04270bdde4bbbeec59f91ea3dc26db4ae28beea18366463f0b84ee11ae5b670a638738d9993a962d77fa332722d62fd544b7c2e9f6e2f7e5e322920dd428abc", @ANYRES16=r1, @ANYBLOB="3f0200000000000000000100000000000000030000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1f, 0x7e0a, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000825bd7000ffdbdf25010000000000000008410000004c00188000000165746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104000000000003067e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB="08190a00", @ANYRES32=r4, @ANYBLOB="a632650800000000000000b9ba9915335720da1d0674f8578b46beb46a699fffe30d654a6253c265a34d8c60082742d4a37dcba4bd02595f052937afe410adfcbb3bcf5316a085e1975b4cfc997a86b84541242eec17aabf24c6f8277b4718bba24a2735c04b9900c181d09330b77935f271ec79d0f6f163d8a114790a92d3520e0e682d87e2ca2513397b669f13fd884e86db56a50b854d8374edb945806cda79f5eecba9970d775d8d302c7e97bc3b907fa3b972e26c9400e9f2a8db9b0e634876c04492cfde4c2eb90e06d80bf54160d29fe758128be29c6fbf324448648cdee845d2750770ba9604bab0958bbc6d72ae1398d47eb4"], 0x44}}, 0x0) 14:32:48 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000003) 14:32:48 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) [ 1735.206933][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1735.206948][ T27] audit: type=1804 audit(1589898768.971:783): pid=17625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2658/cgroup.controllers" dev="sda1" ino=15813 res=1 14:32:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3f00, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1735.406753][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:32:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x8c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:49 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x810e, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0xa, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003280), 0x0, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 14:32:49 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000007fffffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:49 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) 14:32:49 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x5865, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:49 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0x1200, 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6ca00000d95d7a0451b83d671e8291ffd68dd741f45af2b56c1aa80dfb2647267f7449c52b7c84ba7f03c45e8c813120cb08f7546bd875a0a73fe68a5cb2bdeaae8572ad81d3468bc003783c49839efb4d1f76dfe4a6d64dd1cc4189371b6e2ae6946e64b2d4c869e36fe3523086c234523192bb00"/147, @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028040000180060002000c000000060004004e2200000c000700000000000400000008000b00736970000600040000000000070006006e71000008000b0073697000080004000200000004003f00000000000000ffff"], 0x6c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r5, 0x0, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0xffe}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 14:32:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x9000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1735.714800][T17650] device vlan2 entered promiscuous mode [ 1735.745982][T17650] device batadv0 entered promiscuous mode [ 1735.794705][ T27] audit: type=1804 audit(1589898769.551:784): pid=17654 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2659/cgroup.controllers" dev="sda1" ino=15892 res=1 [ 1735.823913][T17650] device batadv0 left promiscuous mode [ 1735.886828][ T27] audit: type=1804 audit(1589898769.601:785): pid=17664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3411/memory.events" dev="sda1" ino=16250 res=1 [ 1736.012693][ T27] audit: type=1800 audit(1589898769.601:786): pid=17664 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16250 res=0 [ 1736.148571][ T27] audit: type=1804 audit(1589898769.601:787): pid=17664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3411/memory.events" dev="sda1" ino=16250 res=1 14:32:50 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000005) [ 1736.312054][ T27] audit: type=1804 audit(1589898769.891:788): pid=17675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3411/memory.events" dev="sda1" ino=16250 res=1 14:32:50 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20048840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000706afc71d94f4d7d300000400259ca3ff76af72d86f4f98dde1de852ca3f2f7d46dbd32a0872f292d8242401afabb7f5fe796444e90033675e63c91df2a7b09df892d0c78ec198bd67094d445bd547a1e28d36507a598d24ecd67b97e08c895d010791e46dd28aa4a088c"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x20000000021) socket(0x1000000010, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = accept4$rose(r3, &(0x7f0000000240)=@short={0xb, @dev, @default}, &(0x7f0000000280)=0x1c, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000002c0)={0x6, 'veth1_vlan\x00', {0x7}, 0x1}) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x4000800, 0x0, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) bind$phonet(r5, &(0x7f0000000300)={0x23, 0xd1, 0x5, 0x7}, 0x10) [ 1736.415403][ T27] audit: type=1804 audit(1589898769.971:789): pid=17664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3411/memory.events" dev="sda1" ino=16250 res=1 [ 1736.484374][T17658] device vlan3 entered promiscuous mode [ 1736.515771][T17658] device batadv0 entered promiscuous mode [ 1736.556222][T17658] device batadv0 left promiscuous mode [ 1736.564965][ T27] audit: type=1804 audit(1589898769.971:791): pid=17667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3411/memory.events" dev="sda1" ino=16250 res=1 [ 1736.650161][ T27] audit: type=1800 audit(1589898769.971:790): pid=17664 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16250 res=0 [ 1736.713855][ T27] audit: type=1804 audit(1589898770.051:792): pid=17675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3411/memory.events" dev="sda1" ino=16250 res=1 14:32:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xb1d000) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) r3 = socket(0x10, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x100000002}) 14:32:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000009effffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x9c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:50 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xb1d000) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) r3 = socket(0x10, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x100000002}) [ 1737.047708][T17714] device vlan2 entered promiscuous mode [ 1737.070576][T17714] device batadv0 entered promiscuous mode [ 1737.117487][T17714] device batadv0 left promiscuous mode 14:32:50 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000006) 14:32:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x6558, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1737.518580][T17723] device vlan3 entered promiscuous mode 14:32:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xa000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1737.558804][T17723] device batadv0 entered promiscuous mode [ 1737.617444][T17723] device batadv0 left promiscuous mode 14:32:51 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000007) 14:32:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000f0ffffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:51 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r3, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x140, 0x12) read(r1, 0x0, 0x1b3) 14:32:51 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f0ffff0000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xac00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1738.103460][T17760] device vlan2 entered promiscuous mode [ 1738.135592][T17760] device batadv0 entered promiscuous mode 14:32:51 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="1b00000018007f5f00fe01b2a4a290930206040000000801021209", 0x1b}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240)) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) recvfrom(r1, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x0, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000080)}, &(0x7f00000000c0)=0x78) 14:32:52 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000008) [ 1738.191745][T17760] device batadv0 left promiscuous mode 14:32:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1738.579824][T17771] device vlan3 entered promiscuous mode [ 1738.599318][T17771] device batadv0 entered promiscuous mode [ 1738.644595][T17771] device batadv0 left promiscuous mode 14:32:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000fffffffffffff00000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf01b, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xbc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:52 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 1739.071242][T17801] device vlan2 entered promiscuous mode [ 1739.097462][T17801] device batadv0 entered promiscuous mode 14:32:52 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000009) [ 1739.146618][T17801] device batadv0 left promiscuous mode 14:32:53 executing program 4: unshare(0x40000000) mmap(&(0x7f00009c0000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xbc, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x18f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x245}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x228}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4800}, 0x840) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair(0x29, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78020000", @ANYRES16=r5, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x40004}, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1739.319793][T17818] IPVS: ftp: loaded support on port[0] = 21 14:32:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x34000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x400300, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1739.815667][T17818] virt_wifi0 speed is unknown, defaulting to 1000 14:32:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe, r3}, [@IFA_FLAGS={0x8, 0x8, 0x4c8}, @IFA_FLAGS={0x8, 0x8, 0x401}]}, 0x28}}, 0x0) 14:32:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:53 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000b) 14:32:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf0ffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1740.035747][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1740.133469][T17848] device vlan2 entered promiscuous mode [ 1740.163178][T17848] device batadv0 entered promiscuous mode 14:32:54 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000d) [ 1740.511765][T17820] IPVS: ftp: loaded support on port[0] = 21 [ 1740.526522][T17848] device batadv0 left promiscuous mode [ 1740.585261][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1740.585278][ T27] audit: type=1804 audit(1589898774.342:802): pid=17867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2666/cgroup.controllers" dev="sda1" ino=16271 res=1 [ 1740.693832][T17818] lo speed is unknown, defaulting to 1000 [ 1740.698612][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xcc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d03a59a4df0500deffe8000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x40001) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x2605125ff536eb7, 0x0, 0x0) [ 1741.004674][ T27] audit: type=1804 audit(1589898774.762:803): pid=17891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3418/cgroup.controllers" dev="sda1" ino=16261 res=1 [ 1741.265712][ T21] tipc: TX() has been purged, node left! 14:32:56 executing program 4: r0 = socket$inet6(0xa, 0x2000000000801, 0x0) sendto$inet6(r0, 0x0, 0x47, 0x20000000, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x168, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0xe8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x2e}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0xd}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={[], [], @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x48094) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 14:32:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xdc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:56 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000f) 14:32:56 executing program 3: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000d) 14:32:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1742.759595][T17924] device vlan2 entered promiscuous mode [ 1742.792403][T17924] device batadv0 entered promiscuous mode [ 1742.825733][ T27] audit: type=1804 audit(1589898776.592:804): pid=17926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2667/cgroup.controllers" dev="sda1" ino=16302 res=1 14:32:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001410000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46040000f61dd093a1822ca887ad56dcacae4bb17eec5ae64cbe686effd8bfc8e67c37e267c4e6e9d1d2d92d28bd8188d1cca537385d0085345ed510eb20c2fcaa4734f36c9399f118f93b178fef21ff56df33c1c13bf4f5ebdc107ff1a916aa70ba93cc0198a58ee3355de861fbd567500e8ba657426accb730418282a2", @ANYRES16=r3, @ANYBLOB="ffff0900000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1742.882332][T17924] device batadv0 left promiscuous mode [ 1742.952331][ T27] audit: type=1804 audit(1589898776.692:805): pid=17922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3419/cgroup.controllers" dev="sda1" ino=16299 res=1 14:32:57 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000010) 14:32:57 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000f) 14:32:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x268, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6dc2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5d2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65ec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x24000000}, 0x44800) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) recvfrom(r2, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) r6 = accept4(r2, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000040)=0x80, 0x800) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000200)=@bcast) mmap(&(0x7f0000034000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) [ 1743.663095][ T27] audit: type=1804 audit(1589898777.422:806): pid=17951 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2668/cgroup.controllers" dev="sda1" ino=16266 res=1 14:32:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x5000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1743.812764][T17960] device vlan2 entered promiscuous mode 14:32:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe010000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1743.857389][T17960] device batadv0 entered promiscuous mode [ 1743.920290][T17960] device batadv0 left promiscuous mode [ 1743.984807][ T27] audit: type=1804 audit(1589898777.742:807): pid=17958 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2805/cgroup.controllers" dev="sda1" ino=16288 res=1 14:32:58 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000012) [ 1744.499269][ T27] audit: type=1804 audit(1589898778.262:808): pid=17980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2669/cgroup.controllers" dev="sda1" ino=16249 res=1 14:32:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:58 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000f) 14:32:58 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000600", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xec00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:58 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000096) 14:32:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x8000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1745.013049][T18002] device vlan2 entered promiscuous mode 14:32:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1745.055239][T18002] device batadv0 entered promiscuous mode [ 1745.098655][T18002] device batadv0 left promiscuous mode [ 1745.150585][ T27] audit: type=1804 audit(1589898778.912:809): pid=18010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2670/cgroup.controllers" dev="sda1" ino=16288 res=1 14:32:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x268, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6dc2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5d2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65ec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x24000000}, 0x44800) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) recvfrom(r2, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) r6 = accept4(r2, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000040)=0x80, 0x800) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000200)=@bcast) mmap(&(0x7f0000034000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) [ 1745.276353][ T27] audit: type=1804 audit(1589898778.912:810): pid=17999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2806/cgroup.controllers" dev="sda1" ino=16284 res=1 14:32:59 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000000e0) 14:32:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:32:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:32:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:32:59 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000f) [ 1745.893666][ T27] audit: type=1804 audit(1589898779.652:811): pid=18031 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2671/cgroup.controllers" dev="sda1" ino=16279 res=1 14:32:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xa000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1746.116688][T18040] device vlan2 entered promiscuous mode [ 1746.158047][T18040] device batadv0 entered promiscuous mode 14:32:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x10000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1746.221980][T18040] device batadv0 left promiscuous mode [ 1746.366980][ T27] audit: type=1804 audit(1589898780.132:812): pid=18041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2807/cgroup.controllers" dev="sda1" ino=15738 res=1 14:33:00 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000000f0) 14:33:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x268, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6dc2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5d2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65ec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x24000000}, 0x44800) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) recvfrom(r2, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) r6 = accept4(r2, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000040)=0x80, 0x800) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000200)=@bcast) mmap(&(0x7f0000034000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) [ 1746.701555][ T27] audit: type=1804 audit(1589898780.462:813): pid=18055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2672/cgroup.controllers" dev="sda1" ino=16251 res=1 14:33:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xb000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x10030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:00 executing program 4: unshare(0x40000000) mmap(&(0x7f00007d7000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d7000/0x2000)=nil, 0x2000, 0x3000001, 0x110, 0xffffffffffffffff, 0xbe69d000) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0xa, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socketpair(0x4, 0x1, 0xf3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 14:33:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xc000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:00 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000001fe) [ 1747.173108][T18076] IPVS: ftp: loaded support on port[0] = 21 14:33:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x10c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1747.241264][T18080] device vlan2 entered promiscuous mode [ 1747.273111][T18080] device batadv0 entered promiscuous mode [ 1747.346724][T18080] device batadv0 left promiscuous mode [ 1747.448345][ T27] audit: type=1804 audit(1589898781.212:814): pid=18092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2673/cgroup.controllers" dev="sda1" ino=16321 res=1 14:33:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xe000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1747.811862][T18076] virt_wifi0 speed is unknown, defaulting to 1000 14:33:01 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000e00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x11c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1747.923241][T18082] IPVS: ftp: loaded support on port[0] = 21 14:33:01 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000b35) 14:33:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1748.126484][T18118] device vlan2 entered promiscuous mode [ 1748.163671][T18118] device batadv0 entered promiscuous mode [ 1748.226578][T18118] device batadv0 left promiscuous mode [ 1748.315563][ T27] audit: type=1804 audit(1589898782.082:815): pid=18124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2674/cgroup.controllers" dev="sda1" ino=16327 res=1 14:33:02 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100001800) [ 1748.703003][T18129] device vlan3 entered promiscuous mode [ 1748.756978][T18129] device batadv0 entered promiscuous mode [ 1748.787655][ T27] audit: type=1804 audit(1589898782.552:816): pid=18137 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2675/cgroup.controllers" dev="sda1" ino=16327 res=1 [ 1748.819630][T18129] device batadv0 left promiscuous mode [ 1749.075301][T18082] virt_wifi0 speed is unknown, defaulting to 1000 [ 1749.075333][T18076] lo speed is unknown, defaulting to 1000 [ 1749.105625][T18142] device vlan2 entered promiscuous mode [ 1749.132106][T18142] device batadv0 entered promiscuous mode [ 1749.173150][T18142] device batadv0 left promiscuous mode [ 1749.464793][T18082] lo speed is unknown, defaulting to 1000 [ 1749.511027][ T27] audit: type=1804 audit(1589898783.272:817): pid=18141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2675/cgroup.controllers" dev="sda1" ino=16327 res=1 [ 1749.824892][ T21] tipc: TX() has been purged, node left! 14:33:05 executing program 4: unshare(0x40000000) mmap(&(0x7f00007d7000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d7000/0x2000)=nil, 0x2000, 0x3000001, 0x110, 0xffffffffffffffff, 0xbe69d000) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0xa, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socketpair(0x4, 0x1, 0xf3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 14:33:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x10000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x12000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000c00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:05 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002000) [ 1752.299113][T18216] device vlan3 entered promiscuous mode [ 1752.316621][T18216] device batadv0 entered promiscuous mode [ 1752.328488][T18220] IPVS: ftp: loaded support on port[0] = 21 [ 1752.363322][T18216] device batadv0 left promiscuous mode [ 1752.364461][ T27] audit: type=1804 audit(1589898786.123:818): pid=18224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2676/cgroup.controllers" dev="sda1" ino=16351 res=1 14:33:06 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002800) [ 1752.686017][ T27] audit: type=1804 audit(1589898786.453:819): pid=18232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2677/cgroup.controllers" dev="sda1" ino=16351 res=1 [ 1752.742066][T18217] device vlan2 entered promiscuous mode [ 1752.750464][T18217] device batadv0 entered promiscuous mode [ 1752.761402][T18217] device batadv0 left promiscuous mode 14:33:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x11000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1752.955827][T18220] virt_wifi0 speed is unknown, defaulting to 1000 14:33:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x12030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:06 executing program 3: unshare(0x40000000) mmap(&(0x7f00007d7000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d7000/0x2000)=nil, 0x2000, 0x3000001, 0x110, 0xffffffffffffffff, 0xbe69d000) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0xa, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socketpair(0x4, 0x1, 0xf3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 14:33:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000003f00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:06 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100003000) [ 1753.204372][T18252] device vlan2 entered promiscuous mode [ 1753.212701][T18253] IPVS: ftp: loaded support on port[0] = 21 [ 1753.262849][T18252] device batadv0 entered promiscuous mode [ 1753.310210][T18252] device batadv0 left promiscuous mode [ 1753.356937][ T27] audit: type=1804 audit(1589898787.123:820): pid=18259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2678/cgroup.controllers" dev="sda1" ino=16304 res=1 [ 1753.696184][T18253] virt_wifi0 speed is unknown, defaulting to 1000 [ 1753.711698][T18220] lo speed is unknown, defaulting to 1000 14:33:07 executing program 4: unshare(0x40000000) mmap(&(0x7f00007d7000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d7000/0x2000)=nil, 0x2000, 0x3000001, 0x110, 0xffffffffffffffff, 0xbe69d000) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0xa, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socketpair(0x4, 0x1, 0xf3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 14:33:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x12000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:07 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100003800) 14:33:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x12c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000144700", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x12060000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1753.977642][ T2844] tipc: TX() has been purged, node left! [ 1753.994144][T18303] device vlan2 entered promiscuous mode 14:33:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x13c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1754.036843][ T27] audit: type=1804 audit(1589898787.803:821): pid=18305 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2679/cgroup.controllers" dev="sda1" ino=16348 res=1 [ 1754.105831][T18303] device batadv0 entered promiscuous mode [ 1754.112612][T18309] IPVS: ftp: loaded support on port[0] = 21 [ 1754.160829][T18303] device batadv0 left promiscuous mode 14:33:08 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:33:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x13000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1754.491614][T18253] lo speed is unknown, defaulting to 1000 [ 1754.491621][T18309] virt_wifi0 speed is unknown, defaulting to 1000 [ 1754.666625][ T27] audit: type=1804 audit(1589898788.433:822): pid=18334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2680/cgroup.controllers" dev="sda1" ino=16304 res=1 [ 1755.031760][T18309] lo speed is unknown, defaulting to 1000 14:33:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000144700", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x14020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:11 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000006000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x18000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:11 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004800) 14:33:11 executing program 4: unshare(0x40000000) mmap(&(0x7f00007d7000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d7000/0x2000)=nil, 0x2000, 0x3000001, 0x110, 0xffffffffffffffff, 0xbe69d000) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0xa, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socketpair(0x4, 0x1, 0xf3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) [ 1757.581501][ T2844] tipc: TX() has been purged, node left! [ 1757.604503][T18401] IPVS: ftp: loaded support on port[0] = 21 14:33:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3f000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1757.670757][T18402] device vlan2 entered promiscuous mode [ 1757.682768][ T27] audit: type=1804 audit(1589898791.443:823): pid=18399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2681/cgroup.controllers" dev="sda1" ino=15923 res=1 [ 1757.689402][T18402] device batadv0 entered promiscuous mode 14:33:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x14c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1757.796168][T18402] device batadv0 left promiscuous mode 14:33:11 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100005000) [ 1758.059440][T18404] device vlan3 entered promiscuous mode [ 1758.065938][T18404] device batadv0 entered promiscuous mode [ 1758.080326][T18404] device batadv0 left promiscuous mode [ 1758.099650][ T27] audit: type=1804 audit(1589898791.863:824): pid=18423 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2682/cgroup.controllers" dev="sda1" ino=15985 res=1 14:33:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x60000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1758.258868][T18401] virt_wifi0 speed is unknown, defaulting to 1000 14:33:12 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000586500", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x15c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x65580000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1758.478674][T18439] device vlan2 entered promiscuous mode [ 1758.498713][T18439] device batadv0 entered promiscuous mode [ 1758.541334][T18439] device batadv0 left promiscuous mode [ 1758.828787][ T27] audit: type=1804 audit(1589898792.593:825): pid=18428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2682/cgroup.controllers" dev="sda1" ino=15985 res=1 14:33:12 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100005800) 14:33:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x72) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0xc, 0x6, 0x401, 0x0, 0x0, {0x8, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) sendmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="3cf060070203648da50ea217fe6d2b728656aa4981efe2d1eb95bcbbecccc5c8b9a14a84c2d2056bab48bab1839f22ed59cfb9c7b8cc9837bd3be554aab437ead1d54f2e7e7656569e403241a3", 0x4d}, {&(0x7f00000004c0)="e239bb1acfe16a1a4c8a239de55a575f4802a6618201fdac3cb7272caeaebbfb8b1c8fae2dcb22feebcb722b10a2f4086114de33a5883e191404754ca0888a39c1cae07727d5d8f6bf7e3363f4b1c8b98c965576699f3c564ef298d5ce7cee8684b7f0629c8287f25dbfa254b0df8663569a9ba3deebedaa4e221f04", 0x7c}], 0x2}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="04", 0x3e00, 0x0, 0x0, 0x0) [ 1758.957212][T18401] lo speed is unknown, defaulting to 1000 14:33:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x81000000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1759.135254][ T27] audit: type=1804 audit(1589898792.903:826): pid=18474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2683/cgroup.controllers" dev="sda1" ino=15706 res=1 14:33:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000f3ebcdb663b8ce39a6000000000000850000007d373b9fbd580000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:33:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x16c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:15 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000008100", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x88a8ffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:15 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100006000) 14:33:15 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="87005500b2cb32a5d0e2ff481adaafe0f38ac5dfbf6b62efb1816e1b8ab0d7f1a5423a6e6aa16514f38ed39bba85fe0ecfd65f0692e91bec8ac5b8a7e20341768396f11cf821be5af1a8d0fd8cf3e9a29cfa30b3107c2be18ff36b492833d5cba0716433a0159bf1f22c37888e307f74a553d970853b87dbf6b3fd5ca56d0620575e4335e8a0fa1a887ae27317fdaee7afb3f1098d43268594ba8b04a7c52df5ea4678d7e1a45ea404febc5eb868a8f67158320fd7312be38651b69472", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 14:33:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1761.885243][T18512] device vlan2 entered promiscuous mode [ 1761.888262][ T27] audit: type=1804 audit(1589898795.653:827): pid=18515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3429/memory.events" dev="sda1" ino=16226 res=1 [ 1761.921287][T18512] device batadv0 entered promiscuous mode 14:33:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x17c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x88a8ffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1761.987111][T18512] device batadv0 left promiscuous mode [ 1761.998427][ T27] audit: type=1800 audit(1589898795.683:828): pid=18515 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16226 res=0 14:33:15 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r3}) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="2b6886f5a74ecf1113044caf5342227217490d95e73bf3a9dc394c57c1ff2be8e3b7098d4a57e9a7d05bd2d4f67b9e5da6da126e567038f86b000000000000000000"], 0x3c}}, 0x0) [ 1762.104864][ T27] audit: type=1804 audit(1589898795.683:829): pid=18515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3429/memory.events" dev="sda1" ino=16226 res=1 [ 1762.221542][ T27] audit: type=1804 audit(1589898795.703:830): pid=18511 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2684/cgroup.controllers" dev="sda1" ino=16193 res=1 [ 1762.284499][ T27] audit: type=1804 audit(1589898795.793:831): pid=18524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3429/memory.events" dev="sda1" ino=16226 res=1 14:33:16 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100006800) [ 1762.358516][ T27] audit: type=1800 audit(1589898795.823:832): pid=18524 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16226 res=0 14:33:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf01b0000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:16 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000000000008000500ac141400080002000000000008000400ffffffff0c0003000000000000000000060006000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="29319f1dca19efd9d6a220fb088adbcf67b36022256242b53d96c6bf11f8e8c31d199797f554e5353824ab3f6948079707b30000000000001ef162e1ddb2012bc8cc2e4ade7fea4581fc250c8b66c22709595c0240c94de524f10d02aeed1de1ec597daf603c0270c7ee8aa3b7627a7a9ec1e4b101204f6ae6d93d0ffdc05eef67258f11a0215533e65413a8420b9afd10be54a50a82ac7f4ae99b7c9c713f5ca3d93ba8e012c5702293f6682c6fe7158bea27ea680820b772f1dda64ac9941f54ac676d87c7ed6e2c9a3499a14429a29b33254fe5a48444ea8fd90b2ea1877c25ffefeb63b02ac06700000000df"], 0x50}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0xa4, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffff801}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xcc3b}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x81}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40090}, 0x4008040) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c810) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, '\x00', {}, 0x9}) 14:33:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x18c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:16 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000ffffa88800", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1762.709910][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1762.709924][ T27] audit: type=1804 audit(1589898796.473:834): pid=18557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2685/cgroup.controllers" dev="sda1" ino=16097 res=1 [ 1762.713370][T18566] device vlan2 entered promiscuous mode 14:33:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x19c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:16 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 1762.876548][T18566] device batadv0 entered promiscuous mode [ 1762.912145][T18566] device batadv0 left promiscuous mode [ 1763.057416][ T27] audit: type=1804 audit(1589898796.823:835): pid=18579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3431/cgroup.controllers" dev="sda1" ino=16290 res=1 [ 1763.127881][T18579] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:17 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 14:33:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf1ffffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:17 executing program 4: socket$netlink(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x140f, 0x8b8d18ed7d657d5, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x850) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xb}, @IFLA_VLAN_FLAGS={0x10, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) 14:33:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000ffffff9e00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1763.434541][ T27] audit: type=1804 audit(1589898797.203:836): pid=18589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2686/cgroup.controllers" dev="sda1" ino=16033 res=1 14:33:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1ac00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfcffffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1763.625499][T18599] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1763.675151][T18599] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1763.779871][ T27] audit: type=1804 audit(1589898797.543:837): pid=18580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3431/cgroup.controllers" dev="sda1" ino=16290 res=1 [ 1763.850010][T18600] device vlan2 entered promiscuous mode [ 1763.889880][T18600] device batadv0 entered promiscuous mode 14:33:17 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 14:33:17 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) [ 1763.970066][T18600] device batadv0 left promiscuous mode 14:33:17 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000ffffa88800", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1764.200599][ T27] audit: type=1804 audit(1589898797.963:838): pid=18621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2687/cgroup.controllers" dev="sda1" ino=16178 res=1 [ 1764.347692][ T27] audit: type=1804 audit(1589898798.113:839): pid=18620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3432/cgroup.controllers" dev="sda1" ino=16081 res=1 [ 1764.408484][T18620] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:18 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000f000) 14:33:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xffffa888, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1bc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1764.578721][T18623] device vlan4 entered promiscuous mode [ 1764.610120][T18623] device batadv0 entered promiscuous mode [ 1764.657158][T18623] device batadv0 left promiscuous mode [ 1764.760309][ T27] audit: type=1804 audit(1589898798.523:840): pid=18644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2688/cgroup.controllers" dev="sda1" ino=16020 res=1 14:33:18 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 14:33:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfffff000, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000fffffff000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1cc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:18 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000ffffa88800", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1765.129010][T18659] device vlan2 entered promiscuous mode [ 1765.157489][T18659] device batadv0 entered promiscuous mode [ 1765.195106][T18659] device batadv0 left promiscuous mode [ 1765.218811][ T27] audit: type=1804 audit(1589898798.983:841): pid=18654 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3433/cgroup.controllers" dev="sda1" ino=16050 res=1 [ 1765.272890][T18654] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:19 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000ffe0) 14:33:19 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 1765.637960][ T27] audit: type=1804 audit(1589898799.404:842): pid=18676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2689/cgroup.controllers" dev="sda1" ino=16020 res=1 [ 1765.679587][T18670] device vlan4 entered promiscuous mode 14:33:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1dc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1765.722038][T18670] device batadv0 entered promiscuous mode [ 1765.774139][T18670] device batadv0 left promiscuous mode 14:33:19 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff0) [ 1765.986812][ T27] audit: type=1804 audit(1589898799.754:843): pid=18688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3434/cgroup.controllers" dev="sda1" ino=16161 res=1 [ 1766.015422][T18688] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:19 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000007fffffff00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1ec00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:20 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000ffffa88800", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1f000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1766.400351][T18714] device vlan4 entered promiscuous mode [ 1766.410107][T18714] device batadv0 entered promiscuous mode [ 1766.440705][T18714] device batadv0 left promiscuous mode 14:33:20 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10018aad7) 14:33:20 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) [ 1766.860945][T18709] device vlan2 entered promiscuous mode [ 1766.879037][T18709] device batadv0 entered promiscuous mode [ 1766.925830][T18709] device batadv0 left promiscuous mode [ 1766.936646][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:20 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1fffff000) 14:33:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfffffff1, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:21 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000ffffffff00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:21 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000007fffffff00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1fc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfffffffc, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:21 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) [ 1767.491576][T18756] device vlan4 entered promiscuous mode [ 1767.497613][T18756] device batadv0 entered promiscuous mode [ 1767.536283][T18756] device batadv0 left promiscuous mode [ 1767.742325][T18766] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:21 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1ffffffe0) [ 1767.950178][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1767.950200][ T27] audit: type=1804 audit(1589898801.714:849): pid=18774 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2693/cgroup.controllers" dev="sda1" ino=16020 res=1 14:33:21 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 1768.049411][T18760] device vlan2 entered promiscuous mode [ 1768.073601][T18760] device batadv0 entered promiscuous mode [ 1768.108289][T18760] device batadv0 left promiscuous mode [ 1768.189941][ T27] audit: type=1804 audit(1589898801.954:850): pid=18786 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3437/cgroup.controllers" dev="sda1" ino=16331 res=1 [ 1768.278247][T18786] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xffffffff, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x20000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:22 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) 14:33:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f0ffffffffffff00", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f00000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:22 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) [ 1768.700138][ T27] audit: type=1804 audit(1589898802.464:851): pid=18775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2693/cgroup.controllers" dev="sda1" ino=16020 res=1 14:33:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x20c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1000000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1768.773246][T18807] device vlan2 entered promiscuous mode [ 1768.804344][T18807] device batadv0 entered promiscuous mode 14:33:22 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1fffffff0) [ 1768.839217][T18807] device batadv0 left promiscuous mode 14:33:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="2300000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1768.922560][ T27] audit: type=1804 audit(1589898802.684:852): pid=18803 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2820/cgroup.controllers" dev="sda1" ino=16338 res=1 [ 1768.977279][T18803] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1769.006215][T18822] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1769.062694][ T27] audit: type=1804 audit(1589898802.714:853): pid=18819 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3438/cgroup.controllers" dev="sda1" ino=16210 res=1 [ 1769.213154][ T27] audit: type=1804 audit(1589898802.824:854): pid=18826 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2694/cgroup.controllers" dev="sda1" ino=16148 res=1 14:33:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="c000000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x21c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1769.388712][T18807] device vlan2 entered promiscuous mode [ 1769.423449][T18807] device batadv0 entered promiscuous mode 14:33:23 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendfile(r4, r2, 0x0, 0x100000002) [ 1769.458448][T18807] device batadv0 left promiscuous mode 14:33:23 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getpid() sendfile(r4, r2, 0x0, 0x100000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) 14:33:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00e000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1769.712130][ T27] audit: type=1804 audit(1589898803.474:855): pid=18846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3439/cgroup.controllers" dev="sda1" ino=15941 res=1 [ 1769.792674][T18849] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1769.833860][ T27] audit: type=1804 audit(1589898803.584:856): pid=18829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2694/cgroup.controllers" dev="sda1" ino=16148 res=1 [ 1769.960990][ T27] audit: type=1804 audit(1589898803.644:857): pid=18857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2821/cgroup.controllers" dev="sda1" ino=16338 res=1 [ 1770.040169][T18851] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:33:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="e03f030024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x22030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:24 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x100000002) 14:33:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="8801002024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x22c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:24 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x25, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @typed={0x8, 0x82, 0x0, 0x0, @pid}]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, r1}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 1770.277387][T18871] device vlan2 entered promiscuous mode [ 1770.297610][T18871] device batadv0 entered promiscuous mode [ 1770.355571][T18871] device batadv0 left promiscuous mode 14:33:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="00f0ff7f24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1770.427504][ T27] audit: type=1804 audit(1589898804.194:858): pid=18876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3440/cgroup.controllers" dev="sda1" ino=16033 res=1 [ 1770.432766][T18876] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:24 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10018aad7) 14:33:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="effdffff24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000003000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x23c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:24 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:24 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x100000002) 14:33:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000007000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:24 executing program 2: r0 = socket(0x21, 0x80000, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x400, @remote}, @in={0x2, 0x4e22, @empty}], 0x2c) pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="34ecaa40edb589c2cdaafd05002fb8a967dcfbd25bd5641e982bffee3071105eddadaad84e82ce8d4469140c0e24fa9942436e2f", @ANYRESHEX, @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008180300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="468e0000ffea16ef785ce3a424d94c4af4d4bff22e6859a3eb43ecf5f8482637f8528f88ff0f3dd67ed7d47a4468e38de6a4b3ad862814fb79739eef53175b60da2b691ef0a8d16e280ced4bf8a1c509a8c49503ff4d0dfb957b7c4d61944b5446", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x24c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000f000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1771.277439][T18916] device vlan2 entered promiscuous mode [ 1771.287311][T18914] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1771.316046][T18916] device batadv0 entered promiscuous mode [ 1771.371378][T18916] device batadv0 left promiscuous mode 14:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4802000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:25 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:25 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 14:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4803000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:25 executing program 2: pipe(&(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYBLOB, @ANYRES64], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}}, 0x801) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4804000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1771.909540][T18934] device vlan4 entered promiscuous mode [ 1771.919583][T18936] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1771.943891][T18934] device batadv0 entered promiscuous mode [ 1772.019401][T18934] device batadv0 left promiscuous mode 14:33:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000600000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4805000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:26 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 14:33:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="7a1a832c668cd92220cb03b2f8eea4e4e74efb0bb037dc3bc7f37c66534fe561aa4a32ae66aada40894e3cb96ffd5a5d30167d0a4d8ab9721f6c5b98ceeadfff14d0b74c1901d94cbedb1537c703184c4ef682537e7f0e08502b25bb65c92d6654e1964691c11406ebd0711bfc1e51c03732f07cfe045c85ea8c0e28ba0d05b47e3be36fc945afbab1aad4f6bcab174a53bce8f3556fe5dccb6c7bb90bec1735112426c1feb2d98372a0105daecbbc84c3809b574d04908765b5ee95833f625e30b6bc2342bc8c8552f048213e5c279a9b4d8a70557468c6dc61d26b2ffef1eae942", @ANYRES32=r2, @ANYBLOB="000000000600000020485ec409d45300"/35]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000180)=0xd7d, &(0x7f0000000100)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="c181792bb52a7fc1fe622a3824ff0f00000000000015f7e3ea8a70", @ANYRES64, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES16=r4, @ANYBLOB, @ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYBLOB="ff831a00deff15065c466740000a00", @ANYRES64=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4806000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:26 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:26 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) 14:33:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x26c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1772.543744][T18970] device vlan2 entered promiscuous mode [ 1772.566318][T18970] device batadv0 entered promiscuous mode [ 1772.619300][T18970] device batadv0 left promiscuous mode 14:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4808000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4809000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:26 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000002) [ 1773.056221][T18981] device vlan4 entered promiscuous mode [ 1773.070866][T18981] device batadv0 entered promiscuous mode [ 1773.083429][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1773.083442][ T27] audit: type=1804 audit(1589898806.844:868): pid=18993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3445/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1773.147888][T18981] device batadv0 left promiscuous mode 14:33:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480a000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:27 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 14:33:27 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r3, 0x4, 0xad0, 0x1, 0x7, 0xfffffbff}, 0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYRES32=r8, @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x27c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480b000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:27 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000ffe0) [ 1773.567661][ T27] audit: type=1804 audit(1589898807.324:869): pid=19013 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2699/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1773.572015][T19018] device vlan2 entered promiscuous mode [ 1773.612752][T19013] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1773.660700][ T27] audit: type=1804 audit(1589898807.384:870): pid=19017 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3446/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1773.706773][T19018] device batadv0 entered promiscuous mode 14:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480c000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1773.759987][T19018] device batadv0 left promiscuous mode 14:33:27 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 14:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480e000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1773.936916][ T27] audit: type=1804 audit(1589898807.694:871): pid=19027 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2825/cgroup.controllers" dev="sda1" ino=16372 res=1 14:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480f000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:27 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1774.086921][ T27] audit: type=1804 audit(1589898807.814:872): pid=19034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3447/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 1774.324612][ T27] audit: type=1804 audit(1589898808.074:873): pid=19044 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2700/cgroup.controllers" dev="sda1" ino=16324 res=1 14:33:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000c00000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:28 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x6e, &(0x7f0000000200)=@hopopts={0x62, 0x10, [], [@enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x3, 0x47, "958c7fcb7b5ec2408b441317e5313ad80646e99a75073fcb17ad6c3de407508571f4ac1fb109b08cfc24029966f581647aca64d41b77a64c794ee7f3ffa915cfd7394ea6cdc710"}, @enc_lim={0x4, 0x1, 0x5e}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x1, [0x40, 0x200, 0xff, 0x2d5]}}]}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) 14:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4810000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x28c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4811000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x29c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:28 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r3, 0x4, 0xad0, 0x1, 0x7, 0xfffffbff}, 0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYRES32=r8, @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1774.640007][T19063] device vlan2 entered promiscuous mode [ 1774.658808][ T27] audit: type=1804 audit(1589898808.404:874): pid=19059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3448/cgroup.controllers" dev="sda1" ino=16383 res=1 14:33:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x80c0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:28 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 1774.715658][T19063] device batadv0 entered promiscuous mode 14:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4812000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1774.778503][T19063] device batadv0 left promiscuous mode 14:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4813000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1774.966760][ T27] audit: type=1804 audit(1589898808.724:875): pid=19078 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2701/cgroup.controllers" dev="sda1" ino=16019 res=1 [ 1775.074399][T19076] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1775.075178][T19083] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4818000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1775.106263][ T27] audit: type=1804 audit(1589898808.784:876): pid=19076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2826/cgroup.controllers" dev="sda1" ino=15684 res=1 [ 1775.260671][ T27] audit: type=1804 audit(1589898808.824:877): pid=19083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3449/cgroup.controllers" dev="sda1" ino=16383 res=1 14:33:29 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000e00000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2a020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4860000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'vlan0\x00', 0x800}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbff, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="736ef5beddc49d29f599dbb05f2664f31fb850a8a3625bdac506a201003838b7f578b9d96fc323166f1e61669b885413b861d6a446e545c59827dbeba66a40353035e69f0ecf289edc63902d4cc7798a439717f6e49500"/107, @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48f0000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1775.591470][T19106] device vlan2 entered promiscuous mode [ 1775.616481][T19106] device batadv0 entered promiscuous mode 14:33:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2ac00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) sendto$inet(r0, &(0x7f0000e78a42), 0x0, 0x24008005, &(0x7f00004d4000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r0, 0x4000005452, &(0x7f0000f75000)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 1775.666532][T19106] device batadv0 left promiscuous mode 14:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800030024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:29 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800050024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1775.980511][T19123] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800060024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:30 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000600)={r4, 0x618, 0x7f}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r4, 0x2dd7}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffdcffc595c895f8ed08004500011c000000000002907800000000e0000001111c907806000000"], 0x0) [ 1776.263532][T19106] device vlan2 entered promiscuous mode [ 1776.296974][T19106] device batadv0 entered promiscuous mode [ 1776.358770][T19106] device batadv0 left promiscuous mode 14:33:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2bc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:30 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4812060024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:30 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x0, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="f86e8f8f", @ANYRES16=r3, @ANYBLOB="ff830a009fc60014e9116b7a85433f5b1192a5fdbe523d4813a9a8f93328343af955bcf2f5a9e1b55c9dac49d8f8e9489770c7a07c7d02583d49c01ca494f81d88c4c5670f815a0700"/87, @ANYRES64=r5, @ANYRES64=r6, @ANYRES32=r7, @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800090024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1776.816401][T19159] device vlan2 entered promiscuous mode [ 1776.838008][T19159] device batadv0 entered promiscuous mode 14:33:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2cc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1776.865470][T19157] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1776.890610][T19159] device batadv0 left promiscuous mode 14:33:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000a0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000b0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:30 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 14:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000c0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:31 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:31 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000006000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000e0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:31 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 14:33:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2dc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000080000000f10000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000f0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1777.737391][T19192] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1777.769846][T19203] device vlan2 entered promiscuous mode [ 1777.787602][T19203] device batadv0 entered promiscuous mode 14:33:31 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) 14:33:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2ec00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1777.850252][T19203] device batadv0 left promiscuous mode 14:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800110024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800120024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:31 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:32 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) [ 1778.455300][T19203] device vlan2 entered promiscuous mode [ 1778.486357][T19203] device batadv0 entered promiscuous mode [ 1778.524794][T19203] device batadv0 left promiscuous mode [ 1778.736163][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1778.736177][ T27] audit: type=1804 audit(1589898812.494:885): pid=19240 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2830/cgroup.controllers" dev="sda1" ino=16066 res=1 [ 1778.774318][T19240] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1778.834089][ T27] audit: type=1804 audit(1589898812.594:886): pid=19236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3455/cgroup.controllers" dev="sda1" ino=16020 res=1 14:33:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x10, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendfile(r2, r0, 0x0, 0xfffffffffffffffd) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x7}, "c0822902fdc4591e", "3a56e2195ac5b2143257f834194210c9d663542fe02d48204731e1bb42fef39a", "1b6dfe89", "7ff5e42338ed5cc5"}, 0x38) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendfile(r3, r2, 0x0, 0x100000002) 14:33:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4806120024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2fc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:32 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800130024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1779.026178][T19251] device vlan2 entered promiscuous mode [ 1779.059695][T19251] device batadv0 entered promiscuous mode 14:33:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x30c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1779.072163][ T27] audit: type=1804 audit(1589898812.834:887): pid=19250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2705/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1779.103104][T19251] device batadv0 left promiscuous mode 14:33:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800180024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48f01b0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:33 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:33 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000100)=0x4, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000dda299ff6f8ef02dcfbf890300"/31, @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48003f0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1779.724796][T19251] device vlan2 entered promiscuous mode [ 1779.744109][T19251] device batadv0 entered promiscuous mode [ 1779.797720][ T27] audit: type=1804 audit(1589898813.555:888): pid=19283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2706/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1779.825587][T19251] device batadv0 left promiscuous mode [ 1779.848143][T19275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1779.892033][ T27] audit: type=1804 audit(1589898813.585:889): pid=19275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2831/cgroup.controllers" dev="sda1" ino=16017 res=1 14:33:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x31c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4865580024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:34 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000c0bd01ef526f36a7ee34afb8119a1f4c49e8f4c89c66965a7789e187cea9eefddffb883f181c56aeed00c7f674e8f98d62026ea69b1c151f5e1866fbc13d316492ee2aebe8fd7b019744d6b431ec009af91b508e97d391ee4fc542d951133e13bfe001425cc217e2b57a38078d3fff4417f211fb832b0226db6638967acb5606eebca5c335a576e4f7e6916fa23d", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1780.310203][ T27] audit: type=1800 audit(1589898814.065:890): pid=19276 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16370 res=0 14:33:34 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:34 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1780.437309][T19304] device vlan2 entered promiscuous mode 14:33:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x32c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:34 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x498, 0xd, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x45c, 0x3, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "f01081a3eb115fd66d17a25ec257891bbe124b7a1e9555df17f22ebef0b722d00281bb1e1f90ed1a5ab9aac8f440c1d5d2e64a291c04d2ee6495b9d5c42a1b1d03223fd5688fc06ee7161daa7cf33ff67875698b0b54f642a90981ea86308b3cf7e4dc90edf67239a89ff36b23df558ae5b5300a656f3208f4f6d457f2961ae8"}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "5791850b269fdcec1efa451c3d233d620a91708bd916a3a3fda1214d4bee6a6b00c717ff9f6d0111aa84276a24b6c3a11bcb17da7cd7c373cda5bc742f5ffea3de507d895d16d4a7e9af073fe12ebeec85726e48c9656406babf1af4"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x53, 0x6, 0x1, 0x0, "f538be69329fd7bc9b85f9f08d1b3c6e69ddb88540efde1b91e48fa732d204a5f48a0c8c9589d9898f344e8395107af63579c5866de928920f411977b4c717147d97a72f03164ad9277a879f6072cd"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x2d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "9482e5d5848aab86861d1d3b4ff880a7e33be59e4bb4d3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "cff31b677853b455bda61eaa0b0cf98e4f866256bcbf53500e4e12e4de54f95579010e149c2ebfa385828bb185df4c30aac9a6c3ab7148a753b906143090deeb77a4ada46b7b7b9e560424080f00c4852d29caa7c0c8d2a2cf6f0b22cf03ae484c4bca02a7d3fa0d6278c3d65d32d1166fd74de26d2b4062864439be9876399e98eb61f6783228f2c87aab78f53c298163a90920c39d069b96920556c6fe11397fa3077fe660a7f09c4a822a40cc764a447ebc2969dc5a49610378bb06b6ee8ba37cd559178a09434c842d11e8e6e15b23f23c4c993b46946285968c83"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "2949ab92479ac1af12e8b592e542dd9ce8f4c2fbaec009e0273968d4f73897fd68aa724bc90d0fda83b7fb6fb0d4c905ca326af285c6af78cde6ba7bdd2de9a54f4e91f263b643f2e76bb7f2b0f9b17a70e98d6360175b5308172480baee0ac96d26d13a3f8421dc416d18980779209910b91abcf8e1aba636f73c43d5ddfb61c6fb197b31d6890c66d7613ab2294ed27a381cd471e7aa9929ef0961ca4fcec0c8e1afd58b9d5c0cfa32ac810d7ecdc3799329389d31f20ef860b378bfea95d01728ceeb957592e8f2d305ad45da54df594f49b917c651e607510c911e657d59e29fe4dd2d7ef9ed77bc7e3efa244d930c2e"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x498}, 0x1, 0x0, 0x0, 0x40800}, 0xc0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800600024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1780.487217][T19304] device batadv0 entered promiscuous mode [ 1780.597497][T19304] device batadv0 left promiscuous mode 14:33:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4858650024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1780.708028][ T27] audit: type=1804 audit(1589898814.465:891): pid=19318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2708/cgroup.controllers" dev="sda1" ino=16381 res=1 14:33:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800810024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800f00024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1781.077575][T19314] device vlan4 entered promiscuous mode [ 1781.094142][T19314] device batadv0 entered promiscuous mode [ 1781.141127][T19314] device batadv0 left promiscuous mode [ 1781.453303][T19337] device vlan2 entered promiscuous mode [ 1781.467174][T19337] device batadv0 entered promiscuous mode [ 1781.492354][T19337] device batadv0 left promiscuous mode [ 1781.581266][ T27] audit: type=1804 audit(1589898815.335:892): pid=19325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3457/cgroup.controllers" dev="sda1" ino=16383 res=1 14:33:35 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="481bf00024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:35 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 14:33:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x33c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:35 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:35 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000073000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1781.905625][T19358] device vlan4 entered promiscuous mode [ 1781.923094][T19358] device batadv0 entered promiscuous mode [ 1781.929984][ T27] audit: type=1804 audit(1589898815.685:893): pid=19361 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2709/cgroup.controllers" dev="sda1" ino=16377 res=1 14:33:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x34c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1781.964593][T19358] device batadv0 left promiscuous mode 14:33:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000ec0000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:35 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf250b0000004800038008000500ac1f0001080001000100000014000600000000f0a00679a309fe1e7bda59643db48400000000000000000000000001060004000008000008000300020000000600040040000000060004000300000008000600080000001c00038008000300030000000800030003000000050008001f00000040000180140003007f00000100000000000000000000000008000b007369700008000b0073697000060004004e240000080005000300000007"], 0xc8}, 0x1, 0x0, 0x0, 0x400c050}, 0x180) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x4, 0x2}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800020024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1782.333710][ T27] audit: type=1804 audit(1589898816.095:894): pid=19385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2710/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1782.445341][T19366] device vlan2 entered promiscuous mode [ 1782.464342][T19366] device batadv0 entered promiscuous mode [ 1782.486893][T19366] device batadv0 left promiscuous mode 14:33:36 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000c000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:36 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) 14:33:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800030024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x100, 0x0, 0x1, 0x800, 0x94d}, 0xc) 14:33:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x35c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:36 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800040024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:36 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1782.969711][T19415] device vlan4 entered promiscuous mode [ 1782.987196][T19415] device batadv0 entered promiscuous mode [ 1783.041000][T19415] device batadv0 left promiscuous mode 14:33:36 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800050024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:36 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8410) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800060024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1783.543199][T19420] device vlan2 entered promiscuous mode [ 1783.555662][T19420] device batadv0 entered promiscuous mode [ 1783.579216][T19420] device batadv0 left promiscuous mode 14:33:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000e000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:37 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800080024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:37 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="46041700bcaa72b12f285a05bcb2a20200000000000000431e76a6ca4005fcb953ff46d8a988ef94670933d86ae9618b7bd26cf7721a5e668521ef31e969ee39038e0e05c51dfdd6f23292c518163f6c7b2a700a6e621d4caa82c13a05700ed5a19315a5719f011e40af85c65918687f72a75deec612a5edae91e99c5dc651adc81b9d964b59f50407dc7c48a6e7c6a46145e26b697e0ae8669bb0d874b2af6f1935af97aa3a7d59faee3be2b1eebcd37ea02a808d7ec2900d7c72055ce9d17000"/204, @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x36c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:37 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800090024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1783.960724][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1783.960739][ T27] audit: type=1804 audit(1589898817.715:896): pid=19458 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2712/cgroup.controllers" dev="sda1" ino=16374 res=1 14:33:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x37000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:37 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1784.040964][T19466] device vlan2 entered promiscuous mode [ 1784.073055][T19463] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1784.075589][T19466] device batadv0 entered promiscuous mode 14:33:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000a0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1784.123602][T19466] device batadv0 left promiscuous mode [ 1784.138114][ T27] audit: type=1804 audit(1589898817.815:897): pid=19463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3464/cgroup.controllers" dev="sda1" ino=16384 res=1 14:33:38 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000b0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000004714000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:38 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:38 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="02f57be798867befb78b567bfeac96a82519a4275e8949475dc221aeb331ee571a5d7571adb08de8e6"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:38 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x37c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000c0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:38 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000e0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1784.784302][ T27] audit: type=1804 audit(1589898818.545:898): pid=19503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3465/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1784.826139][T19506] device vlan2 entered promiscuous mode 14:33:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x38c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1784.832593][T19503] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1784.842010][T19506] device batadv0 entered promiscuous mode [ 1784.886554][ T27] audit: type=1804 audit(1589898818.595:899): pid=19512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2713/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1784.886693][T19506] device batadv0 left promiscuous mode 14:33:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000f0024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:38 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:38 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1785.384109][T19506] device vlan2 entered promiscuous mode [ 1785.389690][T19506] device batadv0 entered promiscuous mode [ 1785.422349][T19506] device batadv0 left promiscuous mode 14:33:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000003f000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800100024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:39 executing program 2: pipe(&(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @mcast2, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r7, @ANYBLOB="cf2a5d57fc9b25fb7f0a0bcdf5bc3a0f13229f567b4b77b11ef8a44d5975b9b9e6afccbb79b731e3ba4c2102be9e90259bd0e5000114ead0f3262bc971a81ffd1336fc303009b5813e6cabf40cd8310f9b2ed465cc8adda348c2ebe0f48e022cf58986e514c5337f8c76ca9d69ef30ad072421e53458dc5fbf9b6b8b6d2c3ac5332d4f8ef4ba8497693c090b04da8dcd701fc9721c779819e8a7de050433aec900b7f35e27457529cf34da349c4d4c9b8f401f1d3aa9e635af0eaf651012b508da8d61c78787b05484292790634f5e78190fdb1e1d657ae9ea5a5e2589a3bedd93d1"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:39 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x39c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:39 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800110024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1785.910861][T19557] device vlan2 entered promiscuous mode [ 1785.923029][ T27] audit: type=1804 audit(1589898819.685:900): pid=19553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3466/cgroup.controllers" dev="sda1" ino=16367 res=1 14:33:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3a000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1785.952057][T19553] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1785.981348][T19557] device batadv0 entered promiscuous mode [ 1786.037669][T19557] device batadv0 left promiscuous mode 14:33:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800120024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:39 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800130024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:40 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000001447000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:40 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1786.689237][ T27] audit: type=1804 audit(1589898820.445:901): pid=19558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2714/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1786.755677][T19591] device vlan2 entered promiscuous mode [ 1786.779436][T19591] device batadv0 entered promiscuous mode [ 1786.788664][ T27] audit: type=1804 audit(1589898820.475:902): pid=19562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2714/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1786.813029][T19591] device batadv0 left promiscuous mode [ 1786.919731][ T27] audit: type=1804 audit(1589898820.675:903): pid=19565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2714/cgroup.controllers" dev="sda1" ino=16373 res=1 14:33:40 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa8, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe7f}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x434}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x85a}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0xa8}}, 0x4) pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2}, 0x6) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='qU', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000b4f66e6ffb93ae7d1d356c30d3604fec1c4b79a1f31308a7a81e16aa1f1719d8ac8209a46a41c0dc30d4d413459afc1bec9cbb7a5e3d9b7cfeb84b74668e68f72b97df1a2018e231c583c21d92ee075b3a4463eecef70c00"/101, @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 14:33:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800180024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3a030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:40 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:40 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x200040000000015, 0x805, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800600024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3ac00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:41 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000006558000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800f00024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:41 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 14:33:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:41 executing program 4: r0 = socket(0x15, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1787.527835][T19629] device vlan2 entered promiscuous mode [ 1787.561175][T19629] device batadv0 entered promiscuous mode 14:33:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3bc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000324000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1787.618988][T19629] device batadv0 left promiscuous mode 14:33:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:41 executing program 4: r0 = socket(0x15, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1787.735187][ T27] audit: type=1804 audit(1589898821.495:904): pid=19639 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2716/cgroup.controllers" dev="sda1" ino=16370 res=1 14:33:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000524000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:41 executing program 4: r0 = socket(0x15, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1788.198515][T19629] device vlan2 entered promiscuous mode [ 1788.207924][T19629] device batadv0 entered promiscuous mode [ 1788.221633][T19629] device batadv0 left promiscuous mode 14:33:42 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000060000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:42 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000624000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:42 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3c000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:42 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800120624000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:42 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3cc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1788.673881][T19685] device vlan2 entered promiscuous mode [ 1788.679478][T19685] device batadv0 entered promiscuous mode [ 1788.692720][ T27] audit: type=1804 audit(1589898822.455:905): pid=19687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2717/cgroup.controllers" dev="sda1" ino=16147 res=1 14:33:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1788.767401][T19685] device batadv0 left promiscuous mode [ 1789.257729][T19685] device vlan2 entered promiscuous mode [ 1789.270504][T19685] device batadv0 entered promiscuous mode [ 1789.289611][T19685] device batadv0 left promiscuous mode 14:33:43 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000005865000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000924000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:43 executing program 4: r0 = socket(0x0, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYBLOB="ba467d4f", @ANYRES16=r4, @ANYRES16=r5, @ANYRESHEX=r0], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3dc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000a24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1789.600928][ T27] audit: type=1804 audit(1589898823.355:906): pid=19725 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2718/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1789.617308][T19734] device vlan2 entered promiscuous mode 14:33:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3ec00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:43 executing program 4: r0 = socket(0x0, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1789.737015][T19734] device batadv0 entered promiscuous mode [ 1789.786891][T19734] device batadv0 left promiscuous mode 14:33:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000b24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000081000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:44 executing program 4: r0 = socket(0x0, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000240)=0x10001) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x300, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xe7}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x29308b545e0e236b}, 0x45) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) 14:33:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000c24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3f000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:44 executing program 4: r0 = socket(0x15, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000e24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1790.415223][T19779] device vlan2 entered promiscuous mode [ 1790.441586][T19779] device batadv0 entered promiscuous mode 14:33:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3fc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1790.502407][T19779] device batadv0 left promiscuous mode 14:33:44 executing program 4: r0 = socket(0x15, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000f24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:44 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000f0000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:44 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:44 executing program 4: r0 = socket(0x15, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001124000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001224000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:44 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1791.160689][T19819] device vlan2 entered promiscuous mode [ 1791.170507][ T27] audit: type=1804 audit(1589898824.935:907): pid=19816 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2720/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 1791.225041][T19819] device batadv0 entered promiscuous mode 14:33:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800061224000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1791.282478][T19819] device batadv0 left promiscuous mode [ 1791.439606][ T27] audit: type=1804 audit(1589898825.195:908): pid=19799 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3479/cgroup.controllers" dev="sda1" ino=16374 res=1 14:33:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:45 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001324000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1791.514780][ T27] audit: type=1800 audit(1589898825.195:909): pid=19799 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16374 res=0 [ 1791.927166][T19819] device vlan2 entered promiscuous mode [ 1791.955733][T19819] device batadv0 entered promiscuous mode [ 1792.000668][T19819] device batadv0 left promiscuous mode [ 1792.233276][ T27] audit: type=1804 audit(1589898825.995:910): pid=19850 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3480/cgroup.controllers" dev="sda1" ino=16367 res=1 14:33:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000fffff00000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:46 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r3, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="69040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001824000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:46 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x40c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800f01b24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1792.397896][T19864] device vlan2 entered promiscuous mode [ 1792.417275][T19864] device batadv0 entered promiscuous mode [ 1792.447831][T19864] device batadv0 left promiscuous mode 14:33:46 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1792.482098][ T27] audit: type=1804 audit(1589898826.245:911): pid=19870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2721/cgroup.controllers" dev="sda1" ino=16370 res=1 14:33:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800003f24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:46 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800655824000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:46 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1792.973427][T19864] device vlan2 entered promiscuous mode [ 1793.005665][T19864] device batadv0 entered promiscuous mode [ 1793.086363][T19864] device batadv0 left promiscuous mode 14:33:47 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x41c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800006024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:47 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:47 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xfffffec8, 0x0, 0x400, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_ORIG_INTERVAL, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x0, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x0, 0x3c, 0xd0ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x0, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX]}, 0x1c}}, 0x200048d1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="49b02015fed02d0440147a5aabfc01b7041a0f09542ec7dbbf100f160355f6bfe257796aadd245aebd871a4a125b1ffac335be733365b5b875e15d8232d1e878454e2cc6ca7db12f3f03cc959fd693225c2a", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1793.532961][ T27] audit: type=1800 audit(1589898827.295:912): pid=19884 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16366 res=0 14:33:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800586524000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:47 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x42c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1793.660958][ T27] audit: type=1804 audit(1589898827.415:913): pid=19912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2722/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1793.763471][T19919] device vlan2 entered promiscuous mode [ 1793.798831][T19919] device batadv0 entered promiscuous mode 14:33:47 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1793.856686][T19919] device batadv0 left promiscuous mode 14:33:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800008124000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:47 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:48 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000f024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:48 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:48 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x43c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1794.546022][ T27] audit: type=1804 audit(1589898828.306:914): pid=19956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2723/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1794.596692][T19958] device vlan2 entered promiscuous mode [ 1794.626636][T19958] device batadv0 entered promiscuous mode [ 1794.661659][T19958] device batadv0 left promiscuous mode [ 1794.757315][ T27] audit: type=1804 audit(1589898828.516:915): pid=19941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3482/cgroup.controllers" dev="sda1" ino=16373 res=1 14:33:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48001bf024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:48 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:48 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ffdbc7b7dc", @ANYRES32=r8], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x5) 14:33:48 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000003000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x44c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1795.122598][T19958] device vlan2 entered promiscuous mode [ 1795.155033][T19958] device batadv0 entered promiscuous mode [ 1795.227274][T19958] device batadv0 left promiscuous mode 14:33:49 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000007000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:49 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:49 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="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", 0xfd}], 0x1}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x45c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1795.774494][T20011] device vlan2 entered promiscuous mode [ 1795.796602][T20011] device batadv0 entered promiscuous mode [ 1795.813236][ T27] audit: type=1804 audit(1589898829.576:916): pid=20009 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2725/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 1795.841220][T20011] device batadv0 left promiscuous mode [ 1796.032390][ T27] audit: type=1804 audit(1589898829.796:917): pid=19996 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3483/cgroup.controllers" dev="sda1" ino=16370 res=1 14:33:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:49 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000f000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000224000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:50 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x46c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:50 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1f, 0x5, 0x7f, 0x7, 0x54, 0x2, 0x1}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x100, 0x70bd25, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) connect$nfc_llcp(r7, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x2, 0x6, 0x80, "8f97c2551e69d7f7ff83828940aa23cf749dfe4db1943e6b2c14f2353d4a8d07b893779fa941025d0ce74911e6b19233e0eebf37d38ba64c8cff13b1afd534", 0x8}, 0x60) sendfile(r2, r1, 0x0, 0x100000002) 14:33:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000600000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000324000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:50 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1796.591693][ T27] audit: type=1804 audit(1589898830.346:918): pid=20038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2726/cgroup.controllers" dev="sda1" ino=16374 res=1 14:33:50 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1796.642629][T20043] device vlan2 entered promiscuous mode [ 1796.648310][T20043] device batadv0 entered promiscuous mode 14:33:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x47c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1796.733340][T20043] device batadv0 left promiscuous mode 14:33:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000424000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:51 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:51 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x48000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000a00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1797.362387][ T27] audit: type=1804 audit(1589898831.126:919): pid=20057 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3484/cgroup.controllers" dev="sda1" ino=16362 res=1 14:33:51 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000524000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1797.540537][T20080] device vlan2 entered promiscuous mode 14:33:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x48c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1797.571865][ T27] audit: type=1804 audit(1589898831.336:920): pid=20085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2727/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 1797.607434][T20080] device batadv0 entered promiscuous mode [ 1797.648508][T20080] device batadv0 left promiscuous mode 14:33:51 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000624000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000aca572b0f89b2d6bf29571f1f13fcbc8a5f62470e0288f975e0b65171844a5bb5cba6d4de8565a49adaeeeea27e4d39cc5735a27f10c24d1b9ae2b9a51c933510a117edd496350ddc5864e7f5060b77bd9cb595870597abc0dde5d247f43128d25cf8bda6d7e988e5868e3b1d9308c2aec2a6385d58c270219042e05b42a", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000824000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:51 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x49c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:52 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1798.229848][T20080] device vlan2 entered promiscuous mode [ 1798.261616][T20080] device batadv0 entered promiscuous mode [ 1798.331560][T20080] device batadv0 left promiscuous mode 14:33:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000c00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000924000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:52 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) accept$netrom(r5, &(0x7f00000000c0)={{0x3, @default}, [@rose, @bcast, @netrom, @null, @null, @null, @rose, @null]}, &(0x7f0000000140)=0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4a000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:52 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:52 executing program 4: socket(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000a24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1798.847847][ T27] audit: type=1804 audit(1589898832.606:921): pid=20144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2729/cgroup.controllers" dev="sda1" ino=16384 res=1 14:33:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4a030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1798.936672][T20155] device vlan2 entered promiscuous mode [ 1798.971436][T20155] device batadv0 entered promiscuous mode [ 1799.027835][T20155] device batadv0 left promiscuous mode 14:33:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000b24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:52 executing program 4: socket(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1799.186604][ T27] audit: type=1804 audit(1589898832.946:922): pid=20165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3488/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 1799.632277][T20155] device vlan2 entered promiscuous mode [ 1799.637860][T20155] device batadv0 entered promiscuous mode [ 1799.661406][T20155] device batadv0 left promiscuous mode 14:33:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000e00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:53 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = accept4(r3, 0x0, &(0x7f00000016c0), 0x80000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r2, 0x10, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000b3994ef54a67a96067a3c57eb43e3282bb3a32e8e96d287468dc7f44c9b30492b87847544bb88b679c0403ff61ba14f3b7aef5a58df220bd1e206224d308753a6945435b146d8c80334888621cd41f7f68f9e20f5aa509ae7277ce114a3c3508a536d3cb1561f8103b25e18d784b101b997efc70dd487c1fb7318bdd0977f4e729e82dea7441c0204601d83dbab1fba04bfdd9ecff74f37d89980ff7b8c1efc065967014d491b63eeaa90f50805a54913a73ff027c0479de9f2b94b5d691fc00894a01154c3de591a47c9b00afaa6e9958bffd3dd6a53f0b26f3a38665837eb3652cf38e743f97dff6b5ad8dc5", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="14ef4adf64e3dd27e158a81ba13bca902997c94693c0bd3cb35610151d2aaeeda27a0bcf558a3a20fb1c19dbd235ab687218f77cb8f62f7be7394a"], 0x1c}}, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @default}, [@default, @bcast, @netrom, @default, @netrom, @remote, @null, @bcast]}, &(0x7f0000000180)=0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES16=r2, @ANYBLOB="ff1a0c00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, r1, 0x0, 0x100000002) 14:33:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000c24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:53 executing program 4: socket(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4ac00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:53 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x0, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4bc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1800.048139][ T27] audit: type=1804 audit(1589898833.806:923): pid=20192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3489/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 1800.068817][T20201] device vlan2 entered promiscuous mode 14:33:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000e24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1800.123440][T20201] device batadv0 entered promiscuous mode [ 1800.203422][T20201] device batadv0 left promiscuous mode 14:33:54 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x0, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:54 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/324]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0xfffffffd, 0x9, 0x7fffffff, 0x438, r1, 0x5f6, [], 0x0, r0, 0x1, 0x4, 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:33:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000f24000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1800.523339][ T27] audit: type=1804 audit(1589898834.286:924): pid=20223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2731/cgroup.controllers" dev="sda1" ino=16376 res=1 14:33:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000001000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:54 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x0, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001124000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:54 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1800.977728][ T27] audit: type=1804 audit(1589898834.736:925): pid=20239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3490/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 1800.989396][T20240] device vlan2 entered promiscuous mode [ 1801.044131][T20240] device batadv0 entered promiscuous mode [ 1801.082819][T20240] device batadv0 left promiscuous mode 14:33:54 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001224000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:55 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001324000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1801.604466][ T27] audit: type=1804 audit(1589898835.366:926): pid=20260 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3491/cgroup.controllers" dev="sda1" ino=16374 res=1 14:33:55 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000003f00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:55 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 14:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800001824000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:55 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0x4, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4018881) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46041500c1c7978b38afede4bc5f39f1ec1391d583b6a40cb252b5449b9b5dc105559bffccf125553d01230f50bb4adc3bf4b5bc0d48cb5b1e366f9fc81c6476da007caa5bca20f55c45a2d00e140460dad12237803800d274b7079e4706c6f832c546c7766113eeb91b2cd375bb777d6dd86c9bf7500e205b18a5840255b6eafc25f47631132158c9ea52798a2560ea51", @ANYRES16=r3, @ANYBLOB="ff830a00000079000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4c030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:55 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 14:33:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800006024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1802.124929][T20284] device vlan2 entered promiscuous mode [ 1802.161742][T20284] device batadv0 entered promiscuous mode 14:33:55 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:33:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4cc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1802.178491][ T27] audit: type=1804 audit(1589898835.936:927): pid=20292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3492/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 1802.254384][T20284] device batadv0 left promiscuous mode 14:33:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000073000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:56 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) 14:33:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000144700000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000ec0000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:56 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, 0x0) 14:33:56 executing program 2: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@bcast, @default, @remote, @null, @null, @bcast, @remote, @netrom]}, &(0x7f0000000200)=0x48) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:33:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4dc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:56 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, 0x0) 14:33:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4ec00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000003000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:56 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1802.984928][ T27] audit: type=1804 audit(1589898836.746:928): pid=20328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3493/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1802.988648][T20332] device vlan2 entered promiscuous mode 14:33:56 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, 0x0) 14:33:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000007000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1803.162071][T20332] device batadv0 entered promiscuous mode [ 1803.202129][ T27] audit: type=1804 audit(1589898836.966:929): pid=20342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2735/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1803.237429][T20332] device batadv0 left promiscuous mode 14:33:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000006000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@ipv4={[], [], @multicast1}, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}}], 0x400000000000107, 0x0) 14:33:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000f000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000440)="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", 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000002) 14:33:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x4fc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000073000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1803.816748][ T27] audit: type=1804 audit(1589898837.576:930): pid=20366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3494/cgroup.controllers" dev="sda1" ino=16376 res=1 14:33:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 14:33:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x50c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1803.885139][T20376] device vlan2 entered promiscuous mode [ 1803.903628][T20376] device batadv0 entered promiscuous mode [ 1803.947192][ T27] audit: type=1804 audit(1589898837.656:931): pid=20377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2736/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1803.971990][T20376] device batadv0 left promiscuous mode 14:33:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000c00e0b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024020b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1804.382768][T20386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1804.557005][ T27] audit: type=1804 audit(1589898838.316:932): pid=20402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3495/cgroup.controllers" dev="sda1" ino=16376 res=1 14:33:58 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000586500000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:58 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b2fdffff", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f100000ef513e75", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x8000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) read(r0, &(0x7f00000000c0)=""/55, 0x37) sendfile(r3, r2, 0x0, 0x100000002) 14:33:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024030b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746b5e66ba", 0xfe2d, 0x20c49a, 0x0, 0x27) 14:33:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x51c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024040b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1804.920680][T20423] device vlan2 entered promiscuous mode 14:33:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x52c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1804.967802][T20423] device batadv0 entered promiscuous mode [ 1805.027636][T20423] device batadv0 left promiscuous mode 14:33:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024050b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:59 executing program 2: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendfile(r0, r1, 0x0, 0x100000002) 14:33:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024060b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1805.246218][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1805.246232][ T27] audit: type=1804 audit(1589898839.006:934): pid=20444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3496/cgroup.controllers" dev="sda1" ino=16377 res=1 14:33:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1805.491330][T20423] device vlan2 entered promiscuous mode [ 1805.497801][ T27] audit: type=1804 audit(1589898839.256:935): pid=20458 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2738/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 1805.554420][T20423] device batadv0 entered promiscuous mode [ 1805.609541][T20423] device batadv0 left promiscuous mode [ 1805.647264][ T27] audit: type=1804 audit(1589898839.406:936): pid=20463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3497/cgroup.controllers" dev="sda1" ino=16363 res=1 14:33:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000008100000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:33:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024080b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x53c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:33:59 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:33:59 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000001640)='b', 0x1}], 0x1, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x1ea71, 0x0) 14:33:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:33:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024090b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:33:59 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) [ 1806.134444][T20486] device vlan2 entered promiscuous mode [ 1806.144008][ T27] audit: type=1804 audit(1589898839.906:937): pid=20478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2739/cgroup.controllers" dev="sda1" ino=16382 res=1 14:33:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x54c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1806.181895][T20486] device batadv0 entered promiscuous mode [ 1806.233223][T20486] device batadv0 left promiscuous mode [ 1806.262165][ T27] audit: type=1804 audit(1589898839.966:938): pid=20483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3498/cgroup.controllers" dev="sda1" ino=16368 res=1 14:34:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000240a0b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 14:34:00 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}}}, 0x0) [ 1806.811143][T20486] device vlan2 entered promiscuous mode [ 1806.823730][T20486] device batadv0 entered promiscuous mode [ 1806.838542][T20486] device batadv0 left promiscuous mode 14:34:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000ffffa88800000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000240b0b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:00 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x400, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004001}, 0x68805) pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)=@newtclass={0x34, 0x28, 0x502, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x8}, {0xfffa, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xab}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x2000c840) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040000000000000000000f10000000000000", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="460401fc", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x40011) sendfile(r3, r2, 0x0, 0x100000002) 14:34:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x31f) 14:34:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x55c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1807.124282][T20532] xt_NFQUEUE: number of total queues is 0 14:34:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000240c0b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x56c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1807.195993][ T27] audit: type=1804 audit(1589898840.956:939): pid=20530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3499/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 1807.198106][T20535] device vlan2 entered promiscuous mode 14:34:01 executing program 4: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x1000c, 0x3f}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000000)=0xc) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 1807.329147][ T27] audit: type=1804 audit(1589898841.016:940): pid=20540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2740/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1807.375448][T20535] device batadv0 entered promiscuous mode 14:34:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000240e0b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1807.425543][T20535] device batadv0 left promiscuous mode [ 1807.479616][ T27] audit: type=1804 audit(1589898841.236:941): pid=20536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2740/cgroup.controllers" dev="sda1" ino=16384 res=1 14:34:01 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0xfffffffc, 0x3, {0xf, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4002}, 0x4004840) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1807.624118][ T27] audit: type=1804 audit(1589898841.276:942): pid=20531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2740/cgroup.controllers" dev="sda1" ino=16384 res=1 14:34:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000240f0b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1807.750304][ T27] audit: type=1804 audit(1589898841.506:943): pid=20553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2741/cgroup.controllers" dev="sda1" ino=16384 res=1 14:34:01 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000ffffff9e00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024100b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x57c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024110b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x58000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1808.145389][T20571] device vlan2 entered promiscuous mode [ 1808.169009][T20571] device batadv0 entered promiscuous mode [ 1808.211992][T20571] device batadv0 left promiscuous mode 14:34:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x40000}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x0) 14:34:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024120b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024130b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:02 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="000329bd70000adcdf25057f8a61960c61291bb2e05f43b88b78000000050001000000000008000400ffffffff1400060000000000002c0433004bfef2ff8f149d4cee9117c7f400000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008885}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024180b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1808.785756][T20586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1808.904399][T20588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000fffffff000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024600b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x58c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:02 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f208", 0x10, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0xa7]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 14:34:02 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x8) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 14:34:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0200"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x59c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1809.199292][T20621] device vlan2 entered promiscuous mode [ 1809.230238][T20621] device batadv0 entered promiscuous mode [ 1809.265499][T20621] device batadv0 left promiscuous mode 14:34:03 executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffc}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 14:34:03 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x84df7b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000110f10000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="460400ad27f163bcea4d9465beb553dab3c3659339422fe9916c4ae9686399c21445b2c7b9e9aa223850f5c39d897b9f9ca111792ab72f6565b0c220a2a85a1409bbd7c978ce0030d333d7c60c86e67c049765dabcc0a3d6348fbf8e123ee6e0047a8c036bbb9bc99a3ea7d605000000000000004c8088334d77c3028877392e2859437e8cb1c4eadd31e197e920ee2d97cdcb23ce4fb41cb613023cf1fdb3b80e9fda421bd82220e113200ec12bad5c5642ab8a36f729d798885ad6ddc6c67e9a9264d49732aa1f", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a800160008000100e558110000000100000e006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 14:34:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0200"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1809.856903][T20621] device vlan2 entered promiscuous mode [ 1809.880337][T20621] device batadv0 entered promiscuous mode [ 1809.935592][T20621] device batadv0 left promiscuous mode [ 1810.117534][T20656] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5ac00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:04 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) recvfrom(r5, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x30004015}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4}}, 0x5c) 14:34:04 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000088a8ffff00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0300"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:04 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x33c) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x10000, @local}, 0x1c, 0x0}}], 0x1, 0x0) 14:34:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1810.440879][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1810.440891][ T27] audit: type=1804 audit(1589898844.197:949): pid=20676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3503/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1810.444618][T20676] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1810.453631][T20679] device vlan2 entered promiscuous mode 14:34:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5bc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1810.491964][ T27] audit: type=1804 audit(1589898844.237:950): pid=20675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2744/cgroup.controllers" dev="sda1" ino=16364 res=1 [ 1810.542243][T20679] device batadv0 entered promiscuous mode [ 1810.562302][T20679] device batadv0 left promiscuous mode 14:34:04 executing program 4: r0 = socket(0x0, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x1e8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 14:34:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:04 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r7, 0x0, 0x0) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 14:34:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5cc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1811.064825][ T27] audit: type=1804 audit(1589898844.827:951): pid=20706 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2745/cgroup.controllers" dev="sda1" ino=16381 res=1 14:34:04 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000f0ffff00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1811.116747][T20707] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 14:34:04 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000000c0)={r0, 0x460}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="566882a7cd30c20803b62c48972df1fdafd07fa2d1207d8a61f3c746f9cf1917ab77bccee2ed6d784b005ede942f53d050e7b9ba23f167d40f37fedecd7e25266b12d9fe9c3fc894ec035ca2abcc30bb2d1d0282e6469ef14b0cb846ab3bcf8013d95a5a8d6c01e3361424879c7ef570ca25c79dd15bffdb68cb49bd1f05edf5b95244ed86a9", 0x86, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0600"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1811.222453][ T27] audit: type=1804 audit(1589898844.867:952): pid=20712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3504/cgroup.controllers" dev="sda1" ino=16382 res=1 14:34:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5dc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1811.364759][T20721] device vlan2 entered promiscuous mode [ 1811.386516][T20721] device batadv0 entered promiscuous mode 14:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1811.431272][T20721] device batadv0 left promiscuous mode [ 1811.450205][ T27] audit: type=1804 audit(1589898845.207:953): pid=20723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2746/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 1811.704136][ T27] audit: type=1804 audit(1589898845.467:954): pid=20735 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3505/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1811.735659][T20735] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 14:34:05 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14:34:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0800"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5ec00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000007fffffff00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:05 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:05 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000400)) 14:34:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1812.082559][T20757] device vlan2 entered promiscuous mode [ 1812.091694][T20757] device batadv0 entered promiscuous mode 14:34:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x5fc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0900"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1812.127201][T20757] device batadv0 left promiscuous mode [ 1812.187664][ T27] audit: type=1804 audit(1589898845.947:955): pid=20760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2747/cgroup.controllers" dev="sda1" ino=16363 res=1 14:34:06 executing program 4: 14:34:06 executing program 4: [ 1812.375701][ T27] audit: type=1804 audit(1589898846.137:956): pid=20770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3506/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 1812.407113][T20770] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 14:34:06 executing program 4: 14:34:06 executing program 4: 14:34:06 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r5, @ANYBLOB="dc16d21ecc362093f7a4ac635f07188108a7c5f3790b02ac89becd48001c3a57d652c20ded7b8c418956f808e5384f1f972d3cd6110caacf22dcab6a83acb2e905f01a0740f6451859f21dae73e176c60a7d0b544559d532541a253c893bc61b58f58a892fa1aa9bbd400be8a67adaf612fd787781ac042ccb450ae0b3b6c3a3b78a8f05dc8b6f1e2b1dd907ad05941697632c7e2841174e07065ac6e3a4e2dd36c382d21f23b10c95425f3b7b2a86f21a2cf0d6b91bf6ac152d771c0abd29e6c6d280a7b888f8b26982d6"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:34:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0a00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000009effffff00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:06 executing program 4: 14:34:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x60000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1812.905133][ T27] audit: type=1804 audit(1589898846.667:957): pid=20787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2748/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:06 executing program 4: 14:34:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0b00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1813.064992][T20795] device vlan2 entered promiscuous mode [ 1813.077514][T20795] device batadv0 entered promiscuous mode [ 1813.101629][T20795] device batadv0 left promiscuous mode 14:34:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x60c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:07 executing program 4: 14:34:07 executing program 4: 14:34:07 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000acb000/0x2000)=nil, 0x2000, 0x5000001, 0x10010, 0xffffffffffffffff, 0xae23d000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x618, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x40, 0x4001, 0x200, 0x6, 0x9}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="46040021d1915891dd00ab5301000000000000009669b8967ef148326b0a096b81d56187f644acb80e5462434c172bd9d2f86b9f57a40f9e4e27bd21e0513a79038a074b5c15ad0cec12916e0b08fda68dbf9499552c560cfb25276998a9b7725d", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32], 0x4}}, 0x20008084) sendfile(r0, r1, 0x0, 0x69) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 14:34:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:07 executing program 4: 14:34:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000f0ffffff00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:07 executing program 4: 14:34:07 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000006c0)={0x11f0, 0x13, 0x300, 0x70bd28, 0x25dfdbfc, {0x19, 0x1, 0x0, 0x54, {0x4e23, 0x4e22, [0x1f, 0x6, 0x9, 0xe592dfea], [0x8f14, 0x9, 0x8000, 0x8001], r7, [0xffff, 0x9]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "fed3f63b8d22eb46338fe16a222d1fee381290973d9a91e67a90038fdd70aa"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "b943f7911cb1f99f268fa96143a82da0e8122479384c8fe316cb8b1f3bbfdae1ebbea17f17fff2dd048e564fdff8a20a72870b1356712dd4ebf1f9e9c1a7c52177fd0f1ce598b347bbb8248dccf82565185273256e308c4345076d6f26674e8771e6db608ea8cf2af587b5edf6b3fd18b0ac9186fd9d27daede125b7096022d6f2158a9db7358e186593c2d44d031f5e278811e1e92afed8aa9f2140b68541fe4b3b2ce56dc88ec6c63c369ecf55711b8b711e41df"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "dff520427cc3e5d12dec11a2f08f936006b2d07f8ed182ca84211b0a81d7235f437d1b1af16a187b9329cc4c298c9135bbd7aa1b05a8d978d4e596a84a9fd4b6a69b4809f8d5cde08a725798d447e4e3573688913c4171689f525ebf7222e44a59d355ae5991fe63fcac14584d644af1b9ae2dfdf91453884f411bd22ed47a154f735d173caee8ad454624fb92b483ac80e8251f68f727648e849ec63b2150ce90b0c216d458c44ea08621b4d2f85fd877d53802589c0cb0cfc4f71a"}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44050) sendfile(r2, r1, 0x0, 0x100000002) 14:34:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0c00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x61c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:07 executing program 4: 14:34:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1813.873391][T20838] device vlan2 entered promiscuous mode [ 1813.885816][ T27] audit: type=1804 audit(1589898847.647:958): pid=20844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3509/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1813.906019][T20838] device batadv0 entered promiscuous mode [ 1813.934868][T20836] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:34:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x62c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:07 executing program 4: [ 1813.976184][T20838] device batadv0 left promiscuous mode 14:34:07 executing program 4: 14:34:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1814.479260][T20838] device vlan2 entered promiscuous mode [ 1814.518193][T20861] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1814.520235][T20838] device batadv0 entered promiscuous mode [ 1814.554396][T20838] device batadv0 left promiscuous mode 14:34:08 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000fffffffffffff000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:08 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:34:08 executing program 4: 14:34:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x63c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f1000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:08 executing program 4: 14:34:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x640f0000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1815.047678][T20887] device vlan2 entered promiscuous mode [ 1815.086823][T20887] device batadv0 entered promiscuous mode 14:34:08 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x40010, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)={0x2000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @private}, &(0x7f0000000100)=0x8) socket$netlink(0x10, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)=0x1) [ 1815.099008][T20887] device batadv0 left promiscuous mode [ 1815.108285][T20883] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 14:34:09 executing program 4: 14:34:09 executing program 4: [ 1815.640027][T20887] device vlan2 entered promiscuous mode [ 1815.652439][T20887] device batadv0 entered promiscuous mode [ 1815.672854][T20887] device batadv0 left promiscuous mode [ 1815.954064][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1815.954078][ T27] audit: type=1804 audit(1589898849.717:962): pid=20902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2752/cgroup.controllers" dev="sda1" ino=16364 res=1 14:34:09 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:09 executing program 4: 14:34:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f1100"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x64c00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1816.044262][ T27] audit: type=1804 audit(1589898849.807:963): pid=20898 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2752/cgroup.controllers" dev="sda1" ino=16364 res=1 [ 1816.131922][ T27] audit: type=1800 audit(1589898849.847:964): pid=20902 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16364 res=0 14:34:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f1200"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:09 executing program 4: [ 1816.247157][T20928] device vlan2 entered promiscuous mode [ 1816.250892][ T27] audit: type=1800 audit(1589898849.847:965): pid=20898 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16364 res=0 [ 1816.273427][T20928] device batadv0 entered promiscuous mode 14:34:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x65580000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1816.290418][T20927] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1816.343728][ T27] audit: type=1804 audit(1589898850.047:966): pid=20933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3512/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 1816.343816][T20928] device batadv0 left promiscuous mode 14:34:10 executing program 4: 14:34:10 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:10 executing program 4: 14:34:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1816.847257][ T27] audit: type=1804 audit(1589898850.607:967): pid=20946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2753/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 1816.878294][T20928] device vlan2 entered promiscuous mode [ 1816.892358][T20928] device batadv0 entered promiscuous mode [ 1816.909325][T20928] device batadv0 left promiscuous mode [ 1816.921521][T20950] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1816.953638][ T27] audit: type=1804 audit(1589898850.677:968): pid=20950 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3513/cgroup.controllers" dev="sda1" ino=16363 res=1 14:34:11 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:11 executing program 4: 14:34:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f1300"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x68000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:11 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="fd5685e201c14d5ba2d321cd2d744c72a5439523919152b53d819b38a690a057f282bc1eb0183d278bdb72e9ab921eb3e950c70e9770b962b5f6c1120835f68489d6cc6b5c287b"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000140)=0x10000, 0x4) sendfile(r2, r1, 0x0, 0x100000002) 14:34:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:11 executing program 4: 14:34:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f1800"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1817.503276][ T27] audit: type=1804 audit(1589898851.267:969): pid=20973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2754/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 1817.539116][T20977] device vlan2 entered promiscuous mode 14:34:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x6a000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1817.553119][T20977] device batadv0 entered promiscuous mode [ 1817.570434][T20976] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1817.596559][T20977] device batadv0 left promiscuous mode 14:34:11 executing program 4: [ 1817.627481][ T27] audit: type=1804 audit(1589898851.317:970): pid=20976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3514/cgroup.controllers" dev="sda1" ino=16372 res=1 14:34:11 executing program 4: 14:34:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 1818.104878][ T27] audit: type=1804 audit(1589898851.867:971): pid=20997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3515/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 1818.167143][T20977] device vlan2 entered promiscuous mode [ 1818.181178][T20977] device batadv0 entered promiscuous mode [ 1818.199362][T20977] device batadv0 left promiscuous mode 14:34:12 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:12 executing program 4: 14:34:12 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @random="2df108907a43", 'netdevsim0\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="9ace047e85678e2e00c9dfccd421f6431ba903edb92453a90571d1182093705af9854bf21381bffc0588c779b4ee1b7be506e1fd1b822530094dc76cb93e14559ba477e7a90105b6843ef385dcb75e51ad5b060da77b5214637ff712c4c7961cb650a36ad979828703b9eb822d05ccfea8bb0a3cd6bafff8f99a93fea6e5c4b53e3d8d516855de236d31de8893be584f80ef7b", 0x93}], 0x1, &(0x7f0000000440)=[{0xf8, 0xff, 0x5, "65b23884edb397d772c252fc0b65b41e130cfc6c02fe65ddf9b74ca8d045807f102d97fe8477719d349cc504d6b72edabf5ec1e691e7839ae539674f9d14f1b1d593f9f2e91b565ecc3abeb24f75a8a165a98e823c79e73492675376b3e29c738b37367a1adb4cd808f28bf567a2272725be6cdb310456289d2c5c8198be46cdfdc342cf8394153a359585d9c28f8548057047306a906269c7e13d4f3a65458cc264698c4ea55df3114e5acd61c0c3f5dc1943c42d65a71d19558613461100f41dcfeb8ffca588cdf4d6b179f51c514a1bea00494700d051d397c6f174fc5ac9cf8eb5bece97"}, {0x70, 0x88, 0x9, "aafa6b50c8a3531f0219caf0d4eea895efd65c8599fefbea9fcbe2870f09d423e9bdfaad06a6ccc58d992250c82a162bbb22495881f4cdad6836f74e34af7d189c0e6853b82389c33d860c018cdc97aab48605a6b82baba2fe"}, {0x20, 0x115, 0x7f, "536970ffc75b86fb797b2205"}, {0x38, 0x10e, 0xffff1eb9, "2e8cc97f396afc7bebc270f8e00c5e68e9513ab477e3aed8c1fa666bc11be7bcd2"}, {0xf8, 0x103, 0x101, "45ed16ca86a18f6e86ce8e2199e7f9441b26b58bef68977d5636d73765ee5b4a73535ec4e098c82bbc93a7e7f8215b343d541c9d21bda4b4504e8e3ec5efd20c66764bd067dd13cb07fcd5d99b117bdf8f7840d0b18bd140f4c877d32ceecac4c29a4afe22e21452cd5ad75ef69ea7a8323f55f0f5e40301ec135e6a97dea74ea5268a738d27d426882dcf7e791b4f559429bee6c65e1f1380ecc647fc359e33f865bc562960d0a99647f7f41b0e9fc0e52b1899301180ae2c9b3f63db51f6528205822ea7759bdca32bdb3351c467ebaf988e2f020fdd2a9e07df7117a1ff93f0e9d0"}, {0xc8, 0x112, 0x1, "c747af0fe61ec7ab37cc9cfb7e941229490480b2ccbd50cb5f9a3e746eb6bc053f430a8be653bf5908dd0856ba61f5750f9adbe18eb1ecc2698272c92f3ecac25a55fd729a781c30bcc9cd82e431d34379ba1a7b0a51e0e0f14039c98a8424c39eb26191ae7cbc189847a42e70c4b716eb4be0251b3aa4393eda779de7d9c52efa508a87b8776441e70f7af9eb732ce509e5b8a9265d25db85e0a88aba07351c10d4c3a0f0427574d66fd4f7da0167446a"}, {0x18, 0x10a, 0x80000000, "51485882e3e3e2"}, {0x60, 0x0, 0x100, "10bf0ce28d697b1beff6b6ab7faa01000b4562600027a6ef4029547b41a96853b0785b90d1f84c6f156865d5af110985dfb8194371816d46b624b3002347b99ba40000000000000000"}], 0x3f8}, 0x20000044) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f6000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x6c000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 14:34:12 executing program 4: 14:34:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 14:34:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ff000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x6e000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1818.652359][T21023] device vlan2 entered promiscuous mode [ 1818.674757][T21023] device batadv0 entered promiscuous mode 14:34:12 executing program 4: [ 1818.735363][T21023] device batadv0 left promiscuous mode 14:34:12 executing program 4: [ 1819.223406][T21023] device vlan2 entered promiscuous mode [ 1819.229083][T21023] device batadv0 entered promiscuous mode [ 1819.239319][T21023] device batadv0 left promiscuous mode 14:34:13 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 14:34:13 executing program 4: 14:34:13 executing program 2: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64, @ANYRES16], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83f31c1adb3fa9808759617282840afb03dc81ffff0027237a4c741f4d7b9cbe537dac4db59a81be3d54b3ccb4322ac644228aae5f5b6ae457981e48020e4d2fe8796c8ad953db98e32216bea79fc2f263565d333aa3af424b3cefe847e2b7485b2a016b3887cfba02a7d9d73961e547b392cb895d81d956368a653da3fbaad346e586ad1dc1f7cfe99472bfbe3f5ebd74f0fd3c4c41f06dbfd5d14badb87e0abe875ede3e0c7a86f3fdaf863806e51447d194cd7089917c1c216926f16217584fb03534a2583ce8a6f2d2ed4f2083aabedd4d95546acd63e6a80a90d8a81d08", @ANYRES32=r5], 0x4}}, 0x0) r8 = socket(0x1000000010, 0x80002, 0xfffffffe) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f00000000c0)=0x20, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x1, 'ipvlan0\x00', {}, 0x9}) sendfile(r3, r2, 0x0, 0x100000002) 14:34:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000300"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x72020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0xe, '\a\x00`'}}}}}, 0x2e) 14:34:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 1819.645762][T21069] device vlan2 entered promiscuous mode [ 1819.681617][T21069] device batadv0 entered promiscuous mode 14:34:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x73e474c0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1819.740569][T21069] device batadv0 left promiscuous mode 14:34:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 14:34:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000600"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:14 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000000000000a", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 14:34:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x74000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:14 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000140)=0x1f, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @local}, {0x1, @multicast}, 0x48, {0x2, 0x4e22, @multicast2}, 'veth0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f120600"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000900"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1821.283517][T21128] device vlan2 entered promiscuous mode [ 1821.302073][T21128] device batadv0 entered promiscuous mode [ 1821.313295][T21128] device batadv0 left promiscuous mode 14:34:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7400000010000104142dfcffffff00feffad1586", @ANYRES32=r1, @ANYBLOB="00000000000000205400128011000100628969646765000000007665001b6a023c0005800500190070"], 0x74}, 0x1, 0x88a8ffff}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 14:34:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x74020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 14:34:15 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff830a000020982bea00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000a00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:15 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000000000000c", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1821.555510][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1821.555526][ T27] audit: type=1804 audit(1589898855.317:983): pid=21149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3522/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 1821.612100][T21158] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 14:34:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000b00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1821.655606][T21164] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x7a000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x107}) [ 1821.739058][ T27] audit: type=1804 audit(1589898855.387:984): pid=21160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2758/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 1821.775877][T21165] device vlan2 entered promiscuous mode [ 1821.812087][T21165] device batadv0 entered promiscuous mode [ 1821.848666][T21165] device batadv0 left promiscuous mode [ 1821.938653][ T27] audit: type=1804 audit(1589898855.697:985): pid=21174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3523/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @dev}, 0x1c, 0x0}, 0x0) 14:34:15 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r8, 0x0, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0x8, 0x12) sendfile(r2, r1, 0x0, 0x100000002) 14:34:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @dev}, 0x1c, 0x0}, 0x0) [ 1822.256643][ T27] audit: type=1804 audit(1589898856.017:986): pid=21186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2759/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000c00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x7c020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @dev}, 0x1c, 0x0}, 0x0) [ 1822.419592][T21165] device vlan2 entered promiscuous mode [ 1822.432581][T21165] device batadv0 entered promiscuous mode [ 1822.501411][T21165] device batadv0 left promiscuous mode 14:34:16 executing program 3: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x40000004) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000000040)=0xfdaf) [ 1822.978675][ T27] audit: type=1804 audit(1589898856.737:987): pid=21187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2759/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:16 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000000000000e", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x17) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001300)={0x0, r1, 0x3, 0x9}) 14:34:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x81000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:16 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xd8020000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x12b1}], 0x1, 0x0, 0x2000000, 0x1f4}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 14:34:16 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, 0xffffffffffffffff, 0x3b9e7000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) read(r7, 0x0, 0x0) epoll_pwait(r7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x2, &(0x7f0000000140), 0x8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040400", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x24008000) sendfile(r2, r1, 0x0, 0x100000002) 14:34:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1823.249710][ T27] audit: type=1800 audit(1589898857.008:988): pid=21233 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16379 res=0 [ 1823.268211][T21238] device vlan2 entered promiscuous mode 14:34:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7fffffa6fffff700000700", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) 14:34:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x88000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1823.316662][T21238] device batadv0 entered promiscuous mode [ 1823.382376][T21238] device batadv0 left promiscuous mode 14:34:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f001100"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1823.566284][T21257] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.3'. 14:34:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x88200000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:17 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) [ 1823.643226][T21238] device vlan2 entered promiscuous mode [ 1823.679049][T21238] device batadv0 entered promiscuous mode [ 1823.706867][T21238] device batadv0 left promiscuous mode [ 1824.115250][ T27] audit: type=1804 audit(1589898857.878:989): pid=21248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2760/cgroup.controllers" dev="sda1" ino=15748 res=1 14:34:17 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) 14:34:17 executing program 4: socket$kcm(0xa, 0x0, 0x11) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x18fec}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:34:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f001200"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x88a8ffff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1824.220748][ T27] audit: type=1804 audit(1589898857.908:990): pid=21251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2760/cgroup.controllers" dev="sda1" ino=15748 res=1 [ 1824.291671][ T27] audit: type=1804 audit(1589898857.908:991): pid=21276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2760/cgroup.controllers" dev="sda1" ino=15748 res=1 [ 1824.414246][T21303] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1824.453342][T21302] device vlan2 entered promiscuous mode [ 1824.465737][T21302] device batadv0 entered promiscuous mode [ 1824.502771][T21302] device batadv0 left promiscuous mode 14:34:18 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r2, 0x0, {0x0, 0xff, 0x4}, 0xfd}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', r2}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:34:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f061200"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x96030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1824.704162][T21303] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1824.768834][T21296] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 14:34:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x9effffff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f001300"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1824.820232][T21289] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1824.860189][ T27] audit: type=1804 audit(1589898858.628:992): pid=21324 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2761/cgroup.controllers" dev="sda1" ino=16383 res=1 14:34:18 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000000000003f", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1824.932304][T21296] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1824.948300][T21296] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 14:34:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f001800"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x18fec}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000500)=""/221, 0xdd}], 0x2, &(0x7f0000000740)=""/242, 0xf2}, 0x0) 14:34:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) 14:34:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xa4000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1825.154736][T21337] device vlan2 entered promiscuous mode [ 1825.187680][T21337] device batadv0 entered promiscuous mode 14:34:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="04268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1825.204394][T21347] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1825.261892][T21337] device batadv0 left promiscuous mode 14:34:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ff01b00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1825.482182][T21347] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1825.513026][T21342] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1825.541855][T21350] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 14:34:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xac020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:19 executing program 4: socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0x0) 14:34:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)=@mpls_delroute={0x6c, 0x19, 0x100, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x20, 0x4, 0xfc, 0x0, 0x0, 0xa, 0x52b00777f018a55d}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0xfff}}, @RTA_MULTIPATH={0xc, 0x9, {0xc90, 0x6, 0x1}}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x7, 0x20}}, @RTA_OIF={0x8, 0x4, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00008da9", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10812000000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={@any, 0x101}) 14:34:19 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000001447", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f003f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xb0010000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1825.791980][T21374] device vlan2 entered promiscuous mode [ 1825.817070][T21374] device batadv0 entered promiscuous mode 14:34:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/586], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000080)="000000000000df7cfac9dc9b70c7", 0x0, 0x6000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) [ 1825.855641][T21374] device batadv0 left promiscuous mode 14:34:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000004e00), 0x60, 0x0) 14:34:19 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="8bfe649baf5a46259e3be1100637593bcd07e2b8329683c3c7f37dbdb4d47359365add175045f4c1b5d91228bb3bd7d7ec9beb95b6def82a92f73226d64979a5bafb548e2700af54eae2636178560d9e412eea65a4464e5a317c7dde93075ca75002a478fe4e95d2a29d1f342e6a987a44eedd05b8ff598ba4cb0d70d96ce07cb97ca6cfe3a1e87fe73220f71b74eeaea53e6e265daf57296cf42147d92bbf68038508e755c941f5929cc28d2a50c9725ed040dd5e3fcdccfb64533ab2"], 0x1c}}, 0x0) pipe(&(0x7f0000000100)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000380)={0x1a, 0x1, 0x22, 0x0, 0xfc, 0x38, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 14:34:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f655800"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:20 executing program 4: 14:34:20 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="110700000000000000001f000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xb2010000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:20 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000060", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f006000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:20 executing program 4: 14:34:20 executing program 3: [ 1826.494431][T21414] device vlan2 entered promiscuous mode 14:34:20 executing program 4: [ 1826.553280][T21414] device batadv0 entered promiscuous mode 14:34:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xb4000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:20 executing program 3: [ 1826.615243][T21414] device batadv0 left promiscuous mode 14:34:20 executing program 4: 14:34:20 executing program 3: 14:34:20 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300ce2d24c13ce753cb92e0a778afd38e6bd56c82", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:20 executing program 4: 14:34:20 executing program 3: [ 1827.026331][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1827.026345][ T27] audit: type=1804 audit(1589898860.788:996): pid=21438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2764/cgroup.controllers" dev="sda1" ino=16372 res=1 14:34:20 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000005865", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:20 executing program 4: 14:34:20 executing program 3: 14:34:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f586500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc0000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:21 executing program 3: 14:34:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14:34:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f008100"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc074e473, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1827.371388][T21455] device vlan2 entered promiscuous mode [ 1827.404751][T21455] device batadv0 entered promiscuous mode [ 1827.470909][T21455] device batadv0 left promiscuous mode 14:34:21 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="46040000e077218ac08591a257b3dae0fe87d5460adbf43ff594cbd8ba5797e3792c6a579f5453c733fdbff0791c7e7b9852ef9cfd46b6fac23bf4f65c516cc24dbffc4a6a84cbdfbef97985a92ada51435e1f1a131f54f954b2fdb193ebcca846ca834f0512f7d7eb7287fc54d1f49b9d76174b306ab58c3dc81e1870a4edea7c0dc72cc26f934f0e399c5792225aeb7dbbd308f9f7df83404e92822befea13b08b19ae87ace7fc8e7fec83c122259172001b6d82b685af3a", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:21 executing program 3: 14:34:21 executing program 3: [ 1827.707477][ T27] audit: type=1804 audit(1589898861.468:997): pid=21472 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2765/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 1827.971821][T21455] device vlan2 entered promiscuous mode [ 1828.001718][T21455] device batadv0 entered promiscuous mode [ 1828.037893][T21455] device batadv0 left promiscuous mode 14:34:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000000000081", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:22 executing program 3: 14:34:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00f000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc1020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:22 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f00000cc000/0x3000)=nil, 0x3000, 0x6, 0x28011, 0xffffffffffffffff, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x44010) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140e, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x7fffffff}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x14000041) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000425a82d018dc0510d224df7b51293463e81cfea48eee88fa81640750eebe48a84ccdebb3eda7cace2e2ce4ad558f8605ad1231db429b875df5a160f4dce674770cd5df1f0830a8dc8bc8ec68b90eced213c80e17bc3ad61c02320d486d56dcc184224fffa64f180a0e0eeb54020da5bd40f3401383ae8ea2e79020017228d24b248a5b96f6f0c64fa1ca982b880ff19128842282174acee00ffeb5793eeb3fa8567ee7e102b239da965f6fcf0ae7a146f3a86d064fa1af3d6fe2c0c4aa3bf27b227c0fa02cbb3e75b518e46d7e18b46b1438b35421203405ffda71a7860e", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) 14:34:22 executing program 4: 14:34:22 executing program 3: 14:34:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f1bf000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc3ffffff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1828.434941][T21499] device vlan2 entered promiscuous mode [ 1828.467312][T21499] device batadv0 entered promiscuous mode 14:34:22 executing program 4: 14:34:22 executing program 3: [ 1828.514655][T21499] device batadv0 left promiscuous mode 14:34:22 executing program 4: 14:34:22 executing program 4: 14:34:22 executing program 3: 14:34:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f004003000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xc8010000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1829.219316][ T27] audit: type=1804 audit(1589898862.968:998): pid=21505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2766/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1829.273840][ T27] audit: type=1804 audit(1589898862.978:999): pid=21509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2766/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1829.341866][ T27] audit: type=1804 audit(1589898862.978:1000): pid=21510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2766/cgroup.controllers" dev="sda1" ino=16365 res=1 14:34:23 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000000c0)=0x3) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:23 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000000ffffa888", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:23 executing program 4: 14:34:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000340000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:23 executing program 3: 14:34:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xdebf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:23 executing program 4: 14:34:23 executing program 3: 14:34:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ffffff0000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1829.609912][T21545] device vlan2 entered promiscuous mode [ 1829.628415][T21545] device batadv0 entered promiscuous mode [ 1829.672483][T21545] device batadv0 left promiscuous mode [ 1829.725389][ T27] audit: type=1804 audit(1589898863.488:1001): pid=21551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2767/cgroup.controllers" dev="sda1" ino=16363 res=1 14:34:23 executing program 4: 14:34:23 executing program 3: 14:34:23 executing program 4: 14:34:23 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1132}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000000", @ANYRES32], 0x4}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1830.186051][T21545] device vlan2 entered promiscuous mode [ 1830.205515][T21545] device batadv0 entered promiscuous mode [ 1830.225964][T21545] device batadv0 left promiscuous mode [ 1830.249190][ T27] audit: type=1804 audit(1589898864.008:1002): pid=21570 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2768/cgroup.controllers" dev="sda1" ino=16367 res=1 14:34:24 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000000ffffff9e", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:24 executing program 3: 14:34:24 executing program 4: 14:34:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000010000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xdfbf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:24 executing program 4: 14:34:24 executing program 3: 14:34:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000020000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe0020000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1830.648850][T21591] device vlan2 entered promiscuous mode [ 1830.675711][T21591] device batadv0 entered promiscuous mode 14:34:24 executing program 4: [ 1830.725702][T21591] device batadv0 left promiscuous mode 14:34:24 executing program 3: [ 1831.200858][T21591] device vlan2 entered promiscuous mode [ 1831.206420][T21591] device batadv0 entered promiscuous mode [ 1831.239175][T21591] device batadv0 left promiscuous mode 14:34:25 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r4, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000600)={r4, 0x618, 0x7f}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x2}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:25 executing program 4: 14:34:25 executing program 3: 14:34:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000030000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:25 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000000fffffff0", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe0bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1831.472787][ T27] audit: type=1804 audit(1589898865.238:1003): pid=21625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2769/cgroup.controllers" dev="sda1" ino=16366 res=1 14:34:25 executing program 3: 14:34:25 executing program 4: 14:34:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000040000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1831.604844][T21634] device vlan2 entered promiscuous mode 14:34:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe1bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1831.646687][T21634] device batadv0 entered promiscuous mode [ 1831.684418][T21634] device batadv0 left promiscuous mode 14:34:25 executing program 3: 14:34:25 executing program 4: [ 1832.164145][T21634] device vlan2 entered promiscuous mode [ 1832.177217][T21634] device batadv0 entered promiscuous mode [ 1832.200190][ T27] audit: type=1804 audit(1589898865.968:1004): pid=21626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2769/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 1832.236165][T21634] device batadv0 left promiscuous mode 14:34:26 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="607c2b33a6535d90b88e1e286ffdb890d5008b8536b25bee0069a2403c0dcc5f5d71eb1a1dcbffd87ee311d68e73306d4901e284f4de56e9a098ee6204dc7ee66456560f15fe8cfcabd5786126a2c090a345d2de44972e09865c0fc593f79a1d6a3a"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe2000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:26 executing program 4: 14:34:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000d00c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0) [ 1832.495692][ T27] audit: type=1804 audit(1589898866.258:1005): pid=21670 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2770/cgroup.controllers" dev="sda1" ino=16373 res=1 14:34:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000007fffffff", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000050000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0xfffffecc) socket$netlink(0x10, 0x3, 0xa) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:34:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) close(r0) 14:34:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe2030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000060000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x9, 0x8, 0x400, 0x40}, 0x40) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 14:34:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000000000000000c", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1832.850892][T21690] device vlan2 entered promiscuous mode [ 1832.875941][T21690] device batadv0 entered promiscuous mode [ 1832.926362][T21690] device batadv0 left promiscuous mode 14:34:26 executing program 2: r0 = epoll_create(0x801) r1 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1000201c}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x160) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000098c5ca9463451500", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="00e70300e8203e02d8854605d48621c04f47a0fd6337afa48e36920a8a2a9b819e73dfe0a9fefc380627685d172f050000d2c208288623b8313b715918a106a9da90892b42abac82ef3452b240b6ce7fe38910a0f17f3976ae45b361c30ab0780fd50de474f9a6d938cfbbe3f3207366cd16868a1c6a113383833326aa98c90cdaaa76ae61c360c8483b3cf54de5450df608ea434ba1c46dc05e374261d108810097f3be92447afeba8b46a3b321022d9c1058218d806ed8c5f853b8b1a9fc07fea45639679ec733c76c57ce115f3faea59f0b92bb80a35b02af27a6451cdfcc63", @ANYRES16=r5, @ANYBLOB="ff830a00000057050000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14:34:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1833.293407][ T27] audit: type=1804 audit(1589898867.058:1006): pid=21707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2771/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000080000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1833.381194][T21700] device vlan3 entered promiscuous mode [ 1833.387223][T21700] device batadv0 entered promiscuous mode [ 1833.405341][T21700] device batadv0 left promiscuous mode 14:34:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe2bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1833.477549][ T27] audit: type=1804 audit(1589898867.238:1007): pid=21708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2982/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 1833.540548][T21708] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1833.618969][ T27] audit: type=1804 audit(1589898867.378:1008): pid=21709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2771/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 1833.647004][ T27] audit: type=1804 audit(1589898867.408:1009): pid=21707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2771/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:27 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000000000ffffffff", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:27 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000001480)=ANY=[@ANYBLOB="46040000", @ANYBLOB="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", @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000090000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe3bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:27 executing program 3: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="607c2b33a6535d90b88e1e286ffdb890d5008b8536b25bee0069a2403c0dcc5f5d71eb1a1dcbffd87ee311d68e73306d4901e284f4de56e9a098ee6204dc7ee66456560f15fe8cfcabd5786126a2c090a345d2de44972e09865c0fc593f79a1d6a3a"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1833.924355][ T27] audit: type=1804 audit(1589898867.688:1010): pid=21730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2772/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 1834.022956][T21735] device vlan2 entered promiscuous mode [ 1834.043740][T21735] device batadv0 entered promiscuous mode [ 1834.079036][T21735] device batadv0 left promiscuous mode 14:34:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1834.333520][ T27] audit: type=1804 audit(1589898868.098:1011): pid=21741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir481242416/syzkaller.hEGNUN/3559/cgroup.controllers" dev="sda1" ino=16362 res=1 14:34:28 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1834.484561][ T27] audit: type=1804 audit(1589898868.248:1012): pid=21746 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2983/cgroup.controllers" dev="sda1" ino=16376 res=1 14:34:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0000000a0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1834.534602][T21746] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000f0ffffffffffff", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1834.634395][ T27] audit: type=1804 audit(1589898868.338:1013): pid=21754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2773/cgroup.controllers" dev="sda1" ino=16373 res=1 14:34:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe4bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0000000b0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1834.845713][T21763] device vlan2 entered promiscuous mode [ 1834.881824][T21763] device batadv0 entered promiscuous mode [ 1834.926194][T21763] device batadv0 left promiscuous mode 14:34:28 executing program 3: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="607c2b33a6535d90b88e1e286ffdb890d5008b8536b25bee0069a2403c0dcc5f5d71eb1a1dcbffd87ee311d68e73306d4901e284f4de56e9a098ee6204dc7ee66456560f15fe8cfcabd5786126a2c090a345d2de44972e09865c0fc593f79a1d6a3a"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:28 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1835.419445][T21781] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.2'. 14:34:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0000000c0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe4ffffff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1835.524921][T21763] device vlan2 entered promiscuous mode [ 1835.560640][T21763] device batadv0 entered promiscuous mode [ 1835.611678][T21763] device batadv0 left promiscuous mode [ 1835.630893][T21782] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:29 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000000c0), 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:29 executing program 3: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6, @ANYBLOB="607c2b33a6535d90b88e1e286ffdb890d5008b8536b25bee0069a2403c0dcc5f5d71eb1a1dcbffd87ee311d68e73306d4901e284f4de56e9a098ee6204dc7ee66456560f15fe8cfcabd5786126a2c090a345d2de44972e09865c0fc593f79a1d6a3a"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0000000e0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe5bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0000000f0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe6bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1836.430676][T21819] device vlan2 entered promiscuous mode [ 1836.458365][T21819] device batadv0 entered promiscuous mode [ 1836.510759][T21819] device batadv0 left promiscuous mode 14:34:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000100000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r8, @ANYBLOB="b774634fa8e261ebf9cd02fca33dc912965094e0ad30d043d3f63a344a2ba4f1a89fe788c5b55ae59a9c5725f675aed15d2eaf33ab6889a51805de28ce3f"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYBLOB], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe7bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:30 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000110000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000006000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1837.193608][T21843] device vlan2 entered promiscuous mode [ 1837.229000][T21843] device batadv0 entered promiscuous mode 14:34:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe8030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1837.331166][T21843] device batadv0 left promiscuous mode 14:34:31 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000c14001285ff496e5437bd672a291012260226bd7000ffdbdf2586003d00000000000800010001000000bf8555348d23ab1e04458fe8bc7619ef6b6bc183f5"], 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r7, @ANYBLOB="f326b00e0f84f8ac67c5d142b4e2a34de3b4e52ac42f6076b427724ad51b66f4dd2d31f0580e681ef8574a11b68f3f16234be06e1e0b9bdee75f8d9a0cb288942823501cf9ee79b2d24d9c0f3ac8c132933ba17d85b57bdc31ba8ead1733f1"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 1837.701566][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1837.701581][ T27] audit: type=1804 audit(1589898871.469:1021): pid=21857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2986/cgroup.controllers" dev="sda1" ino=16359 res=1 14:34:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000120000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1837.833571][T21851] device vlan3 entered promiscuous mode [ 1837.847783][T21851] device batadv0 entered promiscuous mode [ 1837.910747][T21851] device batadv0 left promiscuous mode 14:34:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000006120000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:32 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe8bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000006000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000130000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1838.539880][ T27] audit: type=1804 audit(1589898872.309:1022): pid=21863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2777/cgroup.controllers" dev="sda1" ino=16382 res=1 14:34:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xe9bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1838.591240][T21888] device vlan2 entered promiscuous mode [ 1838.595377][ T27] audit: type=1804 audit(1589898872.309:1023): pid=21864 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2777/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1838.628604][T21888] device batadv0 entered promiscuous mode [ 1838.659900][T21888] device batadv0 left promiscuous mode [ 1838.799602][ T27] audit: type=1804 audit(1589898872.569:1024): pid=21899 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2987/cgroup.controllers" dev="sda1" ino=15747 res=1 14:34:32 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r7, &(0x7f0000000480)=@kern={0x10, 0x0, 0x0, 0x100004}, 0xc) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1838.887844][ T27] audit: type=1804 audit(1589898872.649:1025): pid=21887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2777/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1838.962026][T21890] device vlan3 entered promiscuous mode [ 1838.976147][T21890] device batadv0 entered promiscuous mode [ 1838.996005][T21890] device batadv0 left promiscuous mode 14:34:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r8, @ANYBLOB="b774634fa8e261ebf9cd02fca33dc912965094e0ad30d043d3f63a344a2ba4f1a89fe788c5b55ae59a9c5725f675aed15d2eaf33ab6889a51805de28ce3f"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYBLOB], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:33 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) r4 = accept4(r3, 0x0, &(0x7f0000000200), 0x800) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000240)=0x800, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[@ANYBLOB="46040000c5769a3b5d23603b44f3b10aa84f6dd876e80d5be6ae0804e09ef11c279d0607b0cfb51fddc1228dff8747b12646d2c8a7dfee4557e70a684deb724f1e8d187b7be5fd49414e5dfbdd3def156cea7290f1d4625407a08a13e5b6ef6c947b240559051b7a62bb20a56de1f69d5082e8425ca997679fbe46837bf94f969eb55a613ed274135b46fcc23d58a311b889b8", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6, @ANYBLOB="73805144b5b8c462e6fa900346455c4899b25f1dc2a80dc493514cc54f6f266bc8869b357ea434b2615ae4b27a94b280f083bdb9e2f063c642f1e259484706652c71e39f93e2e4ead6e478a8fb919c86d2b66d89b93869443b422d9781cc1232867dcbb85e4dc87d006a7445ac4f73e43a54bed7eeaa300610ffbf7ee5ddd1d7897752f853a4c730a1ca784a6129ff78a257a600a539e2ca71e5434bbbff5afe482ada8941e63bf2bce54eb7c3d28594fb431a91c4f90cecd37e76559c5bcd510db76f5cdf4435870fd0c9a1dff31ebd13f2", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000180000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:33 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xeabf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1839.482924][ T27] audit: type=1804 audit(1589898873.249:1026): pid=21923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2779/cgroup.controllers" dev="sda1" ino=16377 res=1 14:34:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000006000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f0000003f0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1839.645007][ T27] audit: type=1804 audit(1589898873.299:1027): pid=21919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2988/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 1839.723457][T21938] device vlan3 entered promiscuous mode [ 1839.736126][T21938] device batadv0 entered promiscuous mode [ 1839.757758][T21938] device batadv0 left promiscuous mode 14:34:33 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 1840.004505][T21941] device vlan2 entered promiscuous mode [ 1840.017991][T21941] device batadv0 entered promiscuous mode [ 1840.037320][T21941] device batadv0 left promiscuous mode 14:34:34 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x0, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:34:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000063c20522b58b4007866598d83c94fdd295f979e02a0e122d09f9a9049ec6d1fa41d46241efb4b38b90720957ec3593e8d8a2da29b04f5c2386d6ed7ce4fc9289f4d3a3c8814825cd8605bf30f7a60e0573d93f51d20ccdc5451c5495511fd2c73a8f4b4607b2c6f4173a782b82a92c40cfc589e2d11a28ef1272abcfbc7d859cb980afa9121fc1", @ANYRES16=0x0, @ANYBLOB="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"/338, @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="20000100000000", @ANYRES64=r7], 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:34 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x0, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1840.456657][ T27] audit: type=1804 audit(1589898874.219:1028): pid=21964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2781/cgroup.controllers" dev="sda1" ino=16381 res=1 14:34:34 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000c00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000600000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xebbf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:34 executing program 3: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:34:34 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000c000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1840.676310][T21975] device vlan5 entered promiscuous mode [ 1840.704882][T21975] device batadv0 entered promiscuous mode [ 1840.736963][T21975] device batadv0 left promiscuous mode 14:34:34 executing program 3: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 14:34:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000081000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1841.055221][T21984] device vlan2 entered promiscuous mode [ 1841.080427][T21984] device batadv0 entered promiscuous mode [ 1841.103895][T21984] device batadv0 left promiscuous mode [ 1841.201197][ T27] audit: type=1804 audit(1589898874.969:1029): pid=21968 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2781/cgroup.controllers" dev="sda1" ino=16381 res=1 14:34:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xecbf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000058650000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:35 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ffdb037fed882fc7b7dc", @ANYRES32=r8], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x8040) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1841.302967][T21997] device vlan3 entered promiscuous mode [ 1841.336298][T21997] device batadv0 entered promiscuous mode [ 1841.392547][T21997] device batadv0 left promiscuous mode [ 1841.531116][ T27] audit: type=1804 audit(1589898875.299:1030): pid=22010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2782/cgroup.controllers" dev="sda1" ino=16381 res=1 14:34:35 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400000000000e000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:35 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000c00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xedbf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000810000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1841.766239][T22021] device vlan2 entered promiscuous mode [ 1841.773047][T22021] device batadv0 entered promiscuous mode [ 1841.804739][T22021] device batadv0 left promiscuous mode 14:34:35 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, &(0x7f0000000100)={0x23, 0x7, 0x7f, 0xa1}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x4000000, 0x25dfdbfd, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000000)={0x3, 'ipvlan0\x00', {0x8}, 0x6}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r3, @ANYRES16, @ANYRES32=r5], 0x4}}, 0x8) sendfile(r2, r1, 0x0, 0x100000002) 14:34:35 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa8, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe7f}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x434}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x85a}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0xa8}}, 0x4) pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2}, 0x6) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='qU', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000b4f66e6ffb93ae7d1d356c30d3604fec1c4b79a1f31308a7a81e16aa1f1719d8ac8209a46a41c0dc30d4d413459afc1bec9cbb7a5e3d9b7cfeb84b74668e68f72b97df1a2018e231c583c21d92ee075b3a4463eecef70c00"/101, @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 14:34:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0fffffa8880000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1842.314355][T22032] device vlan5 entered promiscuous mode [ 1842.341429][T22032] device batadv0 entered promiscuous mode [ 1842.400516][T22032] device batadv0 left promiscuous mode 14:34:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f000000810000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:36 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0fffffff9e0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xeebf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000006000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:36 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r6, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x14}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7642}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 14:34:36 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000000c00000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xefbf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1843.003837][T22071] device vlan2 entered promiscuous mode [ 1843.016951][T22071] device batadv0 entered promiscuous mode [ 1843.063279][T22071] device batadv0 left promiscuous mode [ 1843.095509][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1843.095524][ T27] audit: type=1804 audit(1589898876.859:1032): pid=22079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2784/cgroup.controllers" dev="sda1" ino=16382 res=1 14:34:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00001bf00000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1843.402585][T22075] device vlan3 entered promiscuous mode [ 1843.423409][T22075] device batadv0 entered promiscuous mode [ 1843.475566][T22075] device batadv0 left promiscuous mode 14:34:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r9, 0x2f688245c11c0a37, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0xc084) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016e20a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 1843.704271][T22078] device vlan5 entered promiscuous mode [ 1843.713713][T22078] device batadv0 entered promiscuous mode [ 1843.736991][T22078] device batadv0 left promiscuous mode [ 1843.785773][ T27] audit: type=1804 audit(1589898877.549:1033): pid=22105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2785/cgroup.controllers" dev="sda1" ino=16382 res=1 14:34:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ffffffff00000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf0030000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1843.946088][T22106] device vlan2 entered promiscuous mode [ 1843.981493][T22106] device batadv0 entered promiscuous mode [ 1844.038379][T22106] device batadv0 left promiscuous mode 14:34:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000006000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1844.336672][T22125] device vlan3 entered promiscuous mode [ 1844.367255][T22125] device batadv0 entered promiscuous mode [ 1844.396140][T22125] device batadv0 left promiscuous mode 14:34:38 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000060000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ffffffff10000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:38 executing program 4: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r6, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x14}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7642}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 14:34:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf0bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:38 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x11, 0x4, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="98b33504529f93840d9d4ffcc3e44a9b", 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 14:34:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ffffffffc0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) [ 1844.784738][ T27] audit: type=1804 audit(1589898878.549:1034): pid=22145 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2786/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 1844.833187][T22149] device vlan2 entered promiscuous mode 14:34:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf0ffffff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1844.874233][T22149] device batadv0 entered promiscuous mode [ 1844.948586][T22149] device batadv0 left promiscuous mode [ 1844.972836][ T27] audit: type=1804 audit(1589898878.679:1035): pid=22159 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2994/cgroup.controllers" dev="sda1" ino=16384 res=1 14:34:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x2cc00400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:38 executing program 2: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r7, @ANYBLOB="7e560a08c82f8536403140ea0e19c5fdca9792069873c3ccab742d24dcee338e628d2ff51dd52a3fb1b220a69f6aea28e4faac2b913309b74bebea3640801e511eb020649f0fc46aa81ef9f079ba297f5915fd3fff34b9b09a857b0e7488a103364125dbd33f4bffff9457d9ea9f3d9f04b0cead7a94e73b0d3821845d214ce7c9baca6908f22c916f1d69e8dde47a4b"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) read(r9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r9, 0xc}, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 14:34:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f88a8ffff0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1845.308668][T22158] device vlan3 entered promiscuous mode [ 1845.328780][T22158] device batadv0 entered promiscuous mode [ 1845.372625][T22158] device batadv0 left promiscuous mode 14:34:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001040000000000f0000000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f00f0ffff0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:39 executing program 4 (fault-call:6 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf1bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:39 executing program 3 (fault-call:5 fault-nth:0): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 1845.851965][T22193] device vlan2 entered promiscuous mode [ 1845.882363][T22193] device batadv0 entered promiscuous mode [ 1845.884913][ T27] audit: type=1804 audit(1589898879.649:1036): pid=22194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2996/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 1845.933358][T22201] FAULT_INJECTION: forcing a failure. [ 1845.933358][T22201] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.936493][T22194] FAULT_INJECTION: forcing a failure. [ 1845.936493][T22194] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.964922][T22193] device batadv0 left promiscuous mode [ 1845.970065][T22194] CPU: 0 PID: 22194 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 [ 1845.983787][T22194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.996964][T22194] Call Trace: [ 1846.001059][T22194] dump_stack+0x188/0x20d [ 1846.006968][T22194] should_fail.cold+0x5/0xa [ 1846.014152][T22194] ? lock_downgrade+0x840/0x840 [ 1846.020876][T22194] ? fault_create_debugfs_attr+0x140/0x140 [ 1846.028420][T22194] should_failslab+0x5/0xf [ 1846.034020][T22194] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1846.040069][T22194] ? aa_file_perm+0x5be/0x14d0 [ 1846.046553][T22194] ? __lock_acquire+0xcbb/0x4c50 [ 1846.055994][T22194] alloc_pipe_info+0x10a/0x4f0 [ 1846.061769][T22194] splice_direct_to_actor+0x777/0x980 [ 1846.067646][T22194] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1846.074452][T22194] ? do_splice_to+0x160/0x160 [ 1846.080354][T22194] do_splice_direct+0x1b4/0x280 [ 1846.087392][T22194] ? splice_direct_to_actor+0x980/0x980 [ 1846.094658][T22194] do_sendfile+0x555/0xc50 [ 1846.100334][T22194] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1846.106876][T22194] ? wait_for_completion+0x270/0x270 [ 1846.113358][T22194] ? __sb_end_write+0x101/0x1d0 [ 1846.119766][T22194] ? vfs_write+0x161/0x5d0 [ 1846.125509][T22194] __x64_sys_sendfile64+0x1cc/0x210 [ 1846.133551][T22194] ? ksys_write+0x1a5/0x250 [ 1846.139277][T22194] ? __ia32_sys_sendfile+0x220/0x220 [ 1846.146452][T22194] ? __ia32_sys_clock_settime+0x260/0x260 [ 1846.153952][T22194] ? trace_hardirqs_off_caller+0x55/0x230 [ 1846.160917][T22194] do_syscall_64+0xf6/0x7d0 [ 1846.166251][T22194] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1846.174194][T22194] RIP: 0033:0x45ca29 [ 1846.178944][T22194] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1846.201141][T22194] RSP: 002b:00007f1720f70c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1846.212896][T22194] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 1846.224010][T22194] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1846.234571][T22194] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1846.244876][T22194] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000006 [ 1846.254582][T22194] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007f1720f716d4 [ 1846.271252][T22201] CPU: 1 PID: 22201 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 1846.282711][T22201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.295241][T22201] Call Trace: [ 1846.299603][T22201] dump_stack+0x188/0x20d [ 1846.304966][T22201] should_fail.cold+0x5/0xa [ 1846.309804][T22201] ? lock_downgrade+0x840/0x840 [ 1846.316061][T22201] ? fault_create_debugfs_attr+0x140/0x140 [ 1846.322433][T22201] should_failslab+0x5/0xf [ 1846.328178][T22201] __kmalloc+0x2d9/0x7a0 [ 1846.333794][T22201] ? rds_info_getsockopt+0x312/0x410 [ 1846.339685][T22201] rds_info_getsockopt+0x312/0x410 [ 1846.345136][T22201] ? rds_info_iter_unmap+0xe0/0xe0 [ 1846.353065][T22201] rds_getsockopt+0x172/0x2d0 [ 1846.358800][T22201] __sys_getsockopt+0x14b/0x2e0 [ 1846.364664][T22201] ? kernel_accept+0x360/0x360 [ 1846.370683][T22201] ? fput_many+0x2f/0x1a0 [ 1846.375476][T22201] ? ksys_write+0x1a5/0x250 [ 1846.381559][T22201] ? __ia32_sys_read+0xb0/0xb0 [ 1846.387777][T22201] ? __ia32_sys_clock_settime+0x260/0x260 [ 1846.392218][ T27] audit: type=1804 audit(1589898880.039:1037): pid=22175 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2787/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 1846.394043][T22201] __x64_sys_getsockopt+0xba/0x150 [ 1846.394063][T22201] ? lockdep_hardirqs_on+0x463/0x620 [ 1846.394082][T22201] do_syscall_64+0xf6/0x7d0 [ 1846.394102][T22201] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1846.394118][T22201] RIP: 0033:0x45ca29 [ 1846.453589][T22201] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1846.476235][T22201] RSP: 002b:00007f54ff7cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 14:34:40 executing program 4 (fault-call:6 fault-nth:1): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 1846.483906][ T27] audit: type=1804 audit(1589898880.039:1038): pid=22178 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2787/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 1846.484743][T22201] RAX: ffffffffffffffda RBX: 00000000004dd500 RCX: 000000000045ca29 [ 1846.484752][T22201] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000003 [ 1846.484761][T22201] RBP: 000000000078bf00 R08: 0000000020000000 R09: 0000000000000000 [ 1846.484769][T22201] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000005 [ 1846.484779][T22201] R13: 000000000000011b R14: 00000000004c3bbc R15: 00007f54ff7ce6d4 14:34:40 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040110) sendfile(r2, r1, 0x0, 0x100000002) [ 1846.687310][ T27] audit: type=1804 audit(1589898880.429:1039): pid=22205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2787/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 1846.719399][T22201] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1846.731021][T22213] FAULT_INJECTION: forcing a failure. [ 1846.731021][T22213] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.731834][T22201] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1846.753288][T22201] CPU: 0 PID: 22201 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 1846.762139][T22201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.772056][T22213] CPU: 1 PID: 22213 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 [ 1846.773010][T22201] RIP: 0010:unpin_user_pages+0x38/0x80 [ 1846.781876][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.787710][T22201] Code: 56 d3 ff 31 ff 4c 89 e6 e8 a5 57 d3 ff 4d 85 e4 74 3f 49 bd 00 00 00 00 00 fc ff df 31 ed e8 ff 55 d3 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 75 2b 48 8b 3b 48 83 c5 01 48 83 c3 08 e8 51 f8 ff [ 1846.799976][T22213] Call Trace: [ 1846.820779][T22201] RSP: 0018:ffffc90015e2fcc8 EFLAGS: 00010246 [ 1846.824247][T22213] dump_stack+0x188/0x20d [ 1846.830305][T22201] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000f5b3000 [ 1846.834629][T22213] should_fail.cold+0x5/0xa [ 1846.842584][T22201] RDX: 0000000000040000 RSI: ffffffff819fdcb1 RDI: 0000000000000007 [ 1846.847247][T22213] ? lock_downgrade+0x840/0x840 [ 1846.855804][T22201] RBP: 0000000000000000 R08: ffff88804357c480 R09: ffffed1015cc7164 [ 1846.860640][T22213] ? fault_create_debugfs_attr+0x140/0x140 [ 1846.868588][T22201] R10: ffff8880ae638b1b R11: ffffed1015cc7163 R12: 000000000000001a [ 1846.874756][T22213] ? aa_path_link+0x300/0x300 [ 1846.882879][T22201] R13: dffffc0000000000 R14: 000000000000001a R15: 0000000020000580 [ 1846.887766][T22213] ? kasan_unpoison_shadow+0x30/0x40 [ 1846.895718][T22201] FS: 00007f54ff7ce700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1846.901110][T22213] should_failslab+0x5/0xf [ 1846.910274][T22201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1846.914852][T22213] __kmalloc+0x2d9/0x7a0 [ 1846.921615][T22201] CR2: 00007f556ad1bbc8 CR3: 000000004bcee000 CR4: 00000000001406f0 [ 1846.926025][T22213] ? kmem_cache_alloc_trace+0x340/0x7d0 [ 1846.934356][T22201] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1846.940247][T22213] ? alloc_pipe_info+0x1e0/0x4f0 [ 1846.948504][T22201] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1846.953776][T22213] ? aa_file_perm+0x5be/0x14d0 [ 1846.961869][T22201] Call Trace: [ 1846.966802][T22213] alloc_pipe_info+0x1e0/0x4f0 [ 1846.970075][T22201] rds_info_getsockopt+0x291/0x410 [ 1846.974821][T22213] splice_direct_to_actor+0x777/0x980 [ 1846.980787][T22201] ? rds_info_iter_unmap+0xe0/0xe0 [ 1846.987381][T22213] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1846.992573][T22201] rds_getsockopt+0x172/0x2d0 [ 1846.998200][T22213] ? do_splice_to+0x160/0x160 [ 1847.003038][T22201] __sys_getsockopt+0x14b/0x2e0 [ 1847.008064][T22213] do_splice_direct+0x1b4/0x280 [ 1847.013349][T22201] ? kernel_accept+0x360/0x360 [ 1847.018433][T22213] ? splice_direct_to_actor+0x980/0x980 [ 1847.023271][T22201] ? fput_many+0x2f/0x1a0 [ 1847.028802][T22213] do_sendfile+0x555/0xc50 [ 1847.034596][T22201] ? ksys_write+0x1a5/0x250 [ 1847.039737][T22213] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1847.045302][T22201] ? __ia32_sys_read+0xb0/0xb0 [ 1847.053601][T22213] ? wait_for_completion+0x270/0x270 [ 1847.059755][T22201] ? __ia32_sys_clock_settime+0x260/0x260 [ 1847.065764][T22213] ? __sb_end_write+0x101/0x1d0 [ 1847.072136][T22201] __x64_sys_getsockopt+0xba/0x150 [ 1847.078239][T22213] ? vfs_write+0x161/0x5d0 [ 1847.084630][T22201] ? lockdep_hardirqs_on+0x463/0x620 [ 1847.089907][T22213] __x64_sys_sendfile64+0x1cc/0x210 [ 1847.095786][T22201] do_syscall_64+0xf6/0x7d0 [ 1847.101073][T22213] ? ksys_write+0x1a5/0x250 [ 1847.106895][T22201] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1847.113971][T22213] ? __ia32_sys_sendfile+0x220/0x220 [ 1847.120392][T22201] RIP: 0033:0x45ca29 [ 1847.126621][T22213] ? __ia32_sys_clock_settime+0x260/0x260 [ 1847.131095][T22201] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1847.137066][T22213] ? trace_hardirqs_off_caller+0x55/0x230 [ 1847.160901][T22201] RSP: 002b:00007f54ff7cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1847.167221][T22213] do_syscall_64+0xf6/0x7d0 [ 1847.177505][T22201] RAX: ffffffffffffffda RBX: 00000000004dd500 RCX: 000000000045ca29 [ 1847.183348][T22213] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1847.192741][T22201] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000003 [ 1847.198682][T22213] RIP: 0033:0x45ca29 [ 1847.210730][T22201] RBP: 000000000078bf00 R08: 0000000020000000 R09: 0000000000000000 [ 1847.215515][T22213] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1847.225987][T22201] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000005 [ 1847.248330][T22213] RSP: 002b:00007f1720f70c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1847.257640][T22201] R13: 000000000000011b R14: 00000000004c3bbc R15: 00007f54ff7ce6d4 [ 1847.266564][T22213] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 1847.276630][T22201] Modules linked in: [ 1847.288173][T22213] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1847.293956][ T27] audit: type=1804 audit(1589898880.489:1040): pid=22213 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir321444313/syzkaller.G3cFqr/2997/cgroup.controllers" dev="sda1" ino=16276 res=1 [ 1847.302263][T22213] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1847.302270][T22213] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000006 [ 1847.302277][T22213] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007f1720f716d4 14:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf2bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 14:34:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f7fffffff0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1847.396876][ T27] audit: type=1804 audit(1589898881.159:1041): pid=22218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922028092/syzkaller.BfE5cw/2788/cgroup.controllers" dev="sda1" ino=16383 res=1 14:34:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000104000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="25330000000000002c00128009000100766c616e000000001c0002800600010000090000040003800c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}}, 0x0) 14:34:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0f9effffff0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) 14:34:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000004060102000001007a59008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 14:34:41 executing program 2: pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0xffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf3bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1847.627515][T22201] ---[ end trace 3a02f6deb1c4f897 ]--- [ 1847.636098][T22233] device vlan2 entered promiscuous mode [ 1847.640800][T22201] RIP: 0010:unpin_user_pages+0x38/0x80 [ 1847.647595][T22201] Code: 56 d3 ff 31 ff 4c 89 e6 e8 a5 57 d3 ff 4d 85 e4 74 3f 49 bd 00 00 00 00 00 fc ff df 31 ed e8 ff 55 d3 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 75 2b 48 8b 3b 48 83 c5 01 48 83 c3 08 e8 51 f8 ff [ 1847.663125][T22233] device batadv0 entered promiscuous mode [ 1847.696000][T22233] device batadv0 left promiscuous mode [ 1847.696676][T22201] RSP: 0018:ffffc90015e2fcc8 EFLAGS: 00010246 [ 1847.751814][T22201] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000f5b3000 [ 1847.779452][T22201] RDX: 0000000000040000 RSI: ffffffff819fdcb1 RDI: 0000000000000007 [ 1847.801295][T22201] RBP: 0000000000000000 R08: ffff88804357c480 R09: ffffed1015cc7164 [ 1847.831446][T22201] R10: ffff8880ae638b1b R11: ffffed1015cc7163 R12: 000000000000001a 14:34:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000024000b0ff0ffffff0000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00eaffff07000100636273001c000200180001"], 0x48}}, 0x0) [ 1847.870609][T22201] R13: dffffc0000000000 R14: 000000000000001a R15: 0000000020000580 [ 1847.902880][T22201] FS: 00007f54ff7ce700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1847.914167][T22201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 14:34:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0xf4bf0400, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) [ 1847.929953][T22245] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1847.951439][T22201] CR2: 00007f556acc1750 CR3: 000000004bcee000 CR4: 00000000001406e0 [ 1847.986732][T22201] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1848.031765][T22201] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1848.063721][T22201] Kernel panic - not syncing: Fatal exception [ 1848.070568][T22201] Kernel Offset: disabled [ 1848.074886][T22201] Rebooting in 86400 seconds..