752e77dd007aa088d2c44a32cd7d1f752d7229c9e78dae38204f5fd2a1bcb655c3aeea02525f3dd0ad6ae26d6b2079640fd079974f502a6ca5943302c323f57ec9d73ebae45a773c1ebb8c5008d59f73add41489585cdfc5850d289a4dfc818dcb2b0b40622ea3514988bd30ec8a2ba5eae4734a278bcc7f3d9b1d3cd690af384a7ed703eeba3f35b89a74cff1ff4b228b52242dcd0490fe2c1", 0xe8}, {&(0x7f0000001980)="940899910430ad05d41be688fe89482ae7eb73f533f409721f937857272ecbbe5bd74032cdc8c89c2cd232b9a1e7bfffb04e45498200a681dd3cca65227010d95e74e1084dc6e1ca4b8e701bf6c75bedf358c6a50c09216fb8294a8e1ba684da5c", 0x61}, {&(0x7f0000001a00)="673e756ded0d06dab8496dad1288840ce72ecb1bbbbc5c146f4e086e240bfa47b7f78f146004d1c46587e37051f68fc368b4552a63491d667e396b824cf9f1dc587f6ec0cfb1e65ff590f09c6ca6e8b330ddf598250cb03387f07d2a60f507b0078db1f447f0db78ce9326cb215313299438084c5e0f34225b964b3884790f4f04a2d95dfd7339e663819141df982764d6e424cb883bf96b0a9164846e45b971b131f9c059336d40eb8129eb7d233e7fc073fbd6c4fda711879cefeee48b8d01af2bc35c170472f0ac0225fd863610e1028f1e0bbdccbdf4f60a3bf2495d4e664aeff512faa62fbba1a90435dae95eec9c11d782a782fc2287df123736e27a42f62f7d610b30b227a465fbe9ee2da3620db9bbc09fbdd70c9bc2685adc463315f7e413cffa53b69f98e62c1e9b7a3694d40eb16dc0d5f9e452c7cd1a31e0f313eec90bbf0890dd0e90171a52cbb9202c7695625a30916c04bb2b80f368315e3b9aaeaefc422d9add782a1c55fc5747ded3a32b29ce2b73df6dcbbe419686af4d17345d2e403b190bd1816cfd401ab90d579d16cf5fa33e932a93aec3803685c5d8c2926a73fbfce424d091f2de658096b2fac77e8e558cbd13742609b395fff12f75791ec1fa12409d5baab7909fe93c49e4ce3b19def84ba280cf8f087abab7cf73ce0aafb128469c430a5ae6fb8504898dcbc55c0989f016af0b993e737a621d4917ab9e8d0afaabd00afa23a9d7ae3600a19df48488da55702357c12f5f712bd655e793d27779f35bc219a8218fb6159e65f10cc5b9d80fa8c08a937d83835bb5d9fcfb30f1f0acaeb5c173f785001c1039c3e8521ef8b415f277bc4575876bec024f67366b254d28d8927bed3e456a65c969b99f42092b80994061f79effd562b78c2ea0f0d866513b0f37254918026c5fc1775da298443d04b9f631f7128dc65ee580460334241a2f1a6969eab5a2cd5ab876232f84d5a2fbf2e7e616872463ee0f6f69cd5a503940475cc6bf942938c2d72df51d6dd6e8942f30a0eeeede2341cbaf52c45bcc33c1af2730de919bf43f5645a91d32d701c878a09f6c3735824e24f9c94974723f9a88bc7df33ad51820dba9469f92979bbeef86b0ab86daf95cb8a2667534dc7a6daa8dd111620149e113b450c76e832e4d0b77f788daa50ab15f973c805a8214de9a73f1691f953238807ff85278d0bfe6eba3ee397c2f9a7244f39b7ac35eb0ffe0a460a7824026ada20d3f4206e8b682b4d8af0236297d35c3bc6f3edaef579f35bb978b720e87d07861288542a0346c6cef2a3838e20e2c6751546b33af5f8fcf72165e6ea7ef208e76ed4abf5fa40e984cc8a4846450c99ce61000a8aff2f7f7492fc5e92b508dbd3ae3483b250e7ad6cd0c14d6c8876602134700eeef42e6d44aeaad468cf4f2a16feee5eeef7af742e6adf5b6532e5eb252418d410369f4a7de20361f31fd01dc7985865de999484d1ebc6e23b04f36e1d6bb863cee42534f8e70ecf56ba83575979bb218b4ac0976244788e0d6cf5391c4dc9764b18e893307fdfc116870d00d69212d96098eae1c0eee548669acddd60e8af2fe48dab909957a9c6f7cd13866c97c75cf338107c01004d1d258960e407585b83661aad02bd6686517d48f6e428976484e83afe233b23e1ae628e784cca9521831f155f5df64752a55491bd114ba6f4d2048a1d64c15e79eca5ba93f88c5e11298e738378a858a0d0fe92dba833c291a2c28483358efe82f9b4ce3dcbc5d2bbbaf8c601eb1fc172417432848dd60b5df452bf3fbdc0542fc3b0cead973e8732209091f9461abd0629884aee6d5d682c663e4fe5bdc8df4a85b83200c704547dfd79629e0a514dd51985b722663d6f3295c25827183f07d5eca18ad74e4c85bf67e4c765b31a603d924d41526993ae20f6f65790729d373353294b695c9d6b2969fd6a3176b9a02292a9e8988861cad1d8a9a07c940b941017769d889dacd3fb0524aa12b95922166d21c3aa9c2913df33c65aeb647235f420b2185ef067e09d0ca63614a56241b5eb018616803c4fccbe8f0d74199ce9df15af0bb60c5b03432abd148827aacbc6adff0084c4dc708e7fa4f6aed0f3988c1378c1ff177f27a030984c87deeef7a5b3d221c5b3ee4e26e5ce4f8cd0edb355006256f8f9932cce98fa4bbc36ef364b0a42a2d794f60333282ae18b7e1295054c7e94d4bcde5d72a7655dbf6a50c52ded4ab10dd47548e8204e51000aeb129b4191fc1743aabd6e2199e0b56bc6e9ec3eabe0a4fe4d3ae4ae6f843b841de9cba2d5232c879dac82412d95a21e5490992662f96930e4f5c1080391ff135280925d979d46a5e42a2ea0bcced5758b0a5366c209e4e2075805765fe531750dc1a023da170cb6e9f29a1a4caeee2bd441f71ab7bf1925828aba0d958117e594479a2c85cf538768eb7fa14c2aae0d6136b0d6d2b29222a412604662dd908937f7d8fc375ff49c1d2803f49a51f96c4789f9f95c7fb617aed3ac887b967fb302d0a608325a7e80491fd145fb1d9d83284068b9922f7844a0980ed31317a07d856912e0b4d69b53f3072cc1abae5a23d6b375f3ef4a3d087f6ff0353be8834e58d3bee2ab788cd3b720f3e0e6504c2fdc6d541f742689fd5ef8b1b0e0d9ae85cfe6bd9d0d5977d3857f5b754058da5641141343edb39089efba12b08113436aedaf26415873b06d9562e33a6aa19c4061379a1814ba03841526cff108d3e7147d50f6f4e1a9483167c6cfea3dc5985bd54b63ed652c8090550ae99071ed218b5307951056110bb690bbe4b767d6f7d185b6ea34151e57c5424ab41941c8cea991715e27646b503f069f2784e07596e9ab5e650acfd1fc2dbfec5bca4f85b66b923bbaac11bb602e084bd052be804bd204c8cba78e58dabad005de50437f373a6cf75607b5582bc347f3c2bbe79b3f5b495c1711f149ab77c47186d1c84a7f5dcc52d6eec5de61ac301fa09881c3c77245fe879104613c6b11ee06c220733139d3216dc6766d202d1a1d91ac0c9d009dcc1ae0f03fd4fe7dd6b8a77666cbd6ecfb466081e8c2606ee75261780e307da4201b9c6102665835a67d83319b7aac77630c893c142c0dae41834869d1ce4fadfe599fa2e58697956c4c753f7e7949b64590ee391091a41e4cd74c072613fb862bfc3e0809bf41f0ac51b3f84966ea5a52181471d16bc43bff70eb60e8273e49b3f4d82021595d67970c05876a21fa94bb5b723f21cc88d6105a06a8793da18abd8946626b3ae0e2a8c24975d3d665d029aee54176e1d043964fb71a8af17c98711dde38ba477adfe5a83a25998824774322584e71f5e5c89fd8661123b1b6c6d7c65c235e8bf6108feca81c3ef186da42ec06c9eb82f1858ae32401dfcdf6597a4bdb0ff5eea1c0b518f0a4b3bd1a9606ef0ba5d6db28e185038a4324b0ffada0614a4fdc25daefcee797ad60917ed677eefe37e99f3a0f56aa6e7991d79a88e4c71bfd529e196ca6f344293380441f94bbe69cfc6d6a1d14c7c1b58858cf9ada68e4cbfcb11b93d85f97dd2a698ee925424d967bca2cd7539f9c1e99e5b74b91fc20293bd4ffe962cf61e444df3babaaaaf9b9c9699ac53e66f6334d027dcfe01f48e75ba26cede0f9ea78959ac904924299ac8376e171ae9d89b14cdba7fb9703e2fa5fceb7228e4a6908e359ab1e09cf3532a41a86816f0d2d1aab2061dfc5a82d18106e13a5a4fb92b596da2d48f292627ddecea9fe6c603f569c7ad39b930e938512c63dd19b5943677106f86350c043906821b1f9b487d4e84ff31853e21df0fcff7242fd530be5428da41ebc007750002e4dc20b0f6f7019612803b4d50f7002a915fa5bed6d6c9eecc3117daa428d826a82bb337a389f40c6342e002a75ac2661eadb40d5bc3e38815f35cae13afacd8e6d2ff2e639d7961d981daef4b1b3500cd3ffd354e6c13789466d1a481b3844454983316cbb2943b2948d3a053a4ddf40610ef711a39664ac96c8c360ce5859790fb0b9c52d01009c9120e500d04aa35bc5679dd35285d31837360a03ab85b466240aa6a379bb413011935f02e1ef569bf1722d8d6484973c95c52d2b37e74ee4a93423ffbb941bf34864dad248f4dda8cfb152b0a5d6032d025b0d3a78400a66e309d4114263ce58fdaf69712f090dd7d2f19791eebd6e60746a6b763a5c62e2d53ae2c5c92d0904446ae6726caabe9c146e51e7a78baf1ae80256a0dbc96b85aa9b853f017f4c5ce31c8bb9855283611c43705c7aed530de0ca24ef262b82f19adc50545fff62f9710ce62c2b7ac6e3594ceeea7dd738378c7e859df2f99cef46d3568dc350531f23cf41d164189ad26ea62a24a0e45cd3f6a411e5ebc74a4cba7e13cee3692ebd7c21932c559a451a949389095d0a2b7a1b7a46274e76c67d88accb2d7f712fb8cf82c80633d4b189560d6d66156df0206bcd4e0a0cabb8c026b6a0947397d1a9ba65a53c741f42e15197151dda2439b6bc5cf72d7be578449a315fe03a6722eed4fde2011d72afd92e15881e8a5b4727f40bb938b661ad186e645094cf09689ed2443003a3526cc1067aefde688ec3e3318d5d78e4da897d3602cab216fe1829fe7395553450dc21c37c26de7278e05355467d4c0d15baa5130607f821532d561634bc32e0231af544982f6c39a28d07083d0d5d8c3ba914b5644c5e5a9738603b4143850df592a2e992c0b3ea524d26209179946ef6831d9da21052c3f1ba90f206ce979202393517fb43c00d1bfa7df33702ce172328b23a9789c2d0f317c387ca7f07da9e739a6d5c01b1fea70a6625e9dae33e7819fb0c876a289f691094ada5c27847ebfc19cf2dc8443ae84468627dd66394dd9842a20b5c422edac0cad7915dc7781f314dbc2804a2760d7f6a14ef019d86c1d8c3d3c4b901d9db8b68cb531e9b280cfd9e9a8be1b5295635fe53ff7f67fae24716052a7a9b7284720c580c5f967db273492e88c370982a2b2a74fbbe0da54ec7cf2b978d793240d1de02cec7ac551afd9d96baa7f6b59fb3a1c071baf68f4315f030276df88942a6c161eebf6a083ac7bd73175be3da09a2206281f21f4e697b3d3e6ed1d22336bf2042ac4b0ee6e267af511dfe9b4026ff9b6b26f5f4b31503d401784fa3bf60057b7ad9633e48ee1671ff2972079a192aa4420d586201677dca7db3d9d51241b62e3567bb3f0bc95a889136bc1b0cec3d1738bf8bbe3f9228a697e2ecbbbd5995c089f59a2c0de9e83ce63b04b94c5a44dc452dc89c3e3e8cb9fa87557413a5c64eecece53562485b3ed1413ace6fd9fbf736095d1b46d0dd24553b10655cfafff064093be3873dd398ad1a4844cfac3b3e594f39db7bf5f71d7a8e790dd7cb190018570ccb805517e5d4b3a607d48968d5d9bbf77e0df2336bf1e75f66f01e2e85e5f0855e48fc141c7b2005d6774d35d84ecf67a44481b80dc03dc962e1f223a0a3f7e736702a9b3ea9653d444b139a0476bff85824a1878aa569162fee6d8d15c01759e617de1a486c30d489464c670da88836ef79e1f2dbe64b87dc9ed27965f585926667941a575d3e77c4275f77d6bfbefc1a359ed6f82ab199801cb78d3f1e07472db078c74091dba2e9c7a7c788f79cc3b15f269c12d46ffde5ac641dcca6c435932ab1d8fa160c39442b1e1bec28c7c023bd8c3367c64b79da27706e999cf871a4f732faac422d8f4b4da163626e4a7cc0c12f707593f96c672f807712cfa716a1eabd43a3458f20ff0b57252def19e4939d6928f", 0x1000}, {&(0x7f0000000380)="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", 0x103}, {&(0x7f00000004c0)="f2ed93ca4e010000008767abaa96c66b0a8a2b8b1646ccc30984354e077773423cfdc1494c1a61209e5b71d016fa74c5db289e8a82c846a1fa59845e97f1f958b112ead9e2aaacb9f4f7282496", 0x28}, {&(0x7f0000000140)}], 0x6, &(0x7f0000002bc0)=[@iv={0xa0, 0x117, 0x2, 0x89, "7fa3cf55c2549df57283d76039df0682ff5f90858f973bd26808bb158ffae1428af337f3a8b249627a2dd1e79d1db5dd545650f81862ca61d34ffa92d85e19d2dce7a7c4ea2f90de2cb48cabc6a4fa68e310584b45fe9ee27f54e0cd966e54d4a497a75a0a0bb01c55c88640c36b0d24f6fa3aca5115409e1a6d3df2e150b6b218abdf3735bae94eaf"}, @op={0x18}, @op={0x18}, @op={0x0, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xade9}], 0x1c8, 0x4000010}, {0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002dc0)="4b1fd7185f660ad6aa68d19f6e766713f35ee0b98c0e91959cf56c6c8679a048faa0aee4952fe8bc8d5f3521e323e70a28df8d97ba35cf521f7b18c6318789031ce24c6c8c5f4c3a24d20f0e808cd4671b9ae1da92341a58d6c8342fb36b2ac79d", 0x61}, {&(0x7f0000002e40)="77d5414d58a5d3570ac6dc5f895c0dedf2ab83af6be32fac9990c1658d301a99f812bf9b99a9a993b66e7195cdd84527df7bedec45528593b39d1f8874e369d26153f1b02b6ad361683102f8d1bbf750faef201b2e0a6f514d7e40ed09c2d85e82d4fb21cd750521aaa6d83a0fcb4f88a0cc4779d31633cb38b854a554b58a7ce6867e98f9d48a0ec165d3ba5d7da936e8363eee", 0x94}], 0x2, 0x0, 0x40, 0x4051}], 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000003680)={@private0, 0x0}, &(0x7f00000036c0)=0x14) bind$packet(r4, &(0x7f0000003700)={0x11, 0xf5, r6, 0x1, 0x81}, 0x14) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, 0x0, 0x720, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18c43a71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47e8d4b7}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x655a6ca9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xad24c11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x563793be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e3d40db}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xc35c878cb26423d6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000802}, 0x40) r7 = socket$kcm(0xa, 0x2, 0x73) bind(r7, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) sendmsg$inet_sctp(r3, &(0x7f0000000880)={&(0x7f0000000600)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000640)="c174e73fafa688a62852c164c5027c0705a6de3b5310deb631b033a3e552cd52abc1156a29c92c07f8fc10ace9f5a91ba00c34dc20fb6c4184333d423143fbf464efc37157a3b0f478a88c545524402c5032170d9349ff9107bd94c4f355c47e3024e81185fed381274da54b9f05da9cd77894e913a0f4b6427772bfd5a16c4859247cd9d61328a755815bf44c0103c6f77cc8d9e99ff9c92b1b4a36fd6044d3c8bcbff77142d34f45c0d7e32e2ff83588dd71eccd6d2b3896c4cfb4f0d26aecfea3133da4e82bfbc8cdae97068285aad1", 0xd1}, {&(0x7f0000000740)="7b9501e9abefe75cb5a8366e6d2a28d8eba6cbac8283be90dce910175df679a7a72eb518c2ddb3205f10aa0de23ce02aa35f7ccfc0f526e2839b724a3d959a993cdecb7218b34a9aaa3f097a4b9f774d0403b1ad35353d6b3999f9504f6054e9bc217bb84653", 0x66}], 0x2, &(0x7f0000000800)=[@init={0x18, 0x84, 0x0, {0x9, 0x20, 0x9, 0xb95}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}], 0x78, 0x805}, 0x20000084) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000100)={0x3, 'team_slave_0\x00', {0x3de}, 0x1}) bind$unix(r3, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 06:16:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000011) [ 299.273158][ T3528] tipc: TX() has been purged, node left! [ 299.307243][T13723] __nla_validate_parse: 8 callbacks suppressed [ 299.307253][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 06:16:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004084}, 0x4001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={0x0, 0x800}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6d, 0x0, &(0x7f0000000000)) [ 299.335746][ T3528] tipc: TX() has been purged, node left! [ 299.344461][ T3528] tipc: TX() has been purged, node left! [ 299.415512][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.439436][T13725] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 299.473966][T13725] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 299.507361][T13732] IPVS: ftp: loaded support on port[0] = 21 [ 299.545362][T13725] IPv6: sit3: Disabled Multicast RS 06:16:27 executing program 4: unshare(0x20000600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) r4 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdc01, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008260204c9655f474844146680bd61f988000029af0f000000000000000000000000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048804) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) 06:16:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000012) 06:16:28 executing program 4: unshare(0x20000600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) r4 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdc01, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008260204c9655f474844146680bd61f988000029af0f000000000000000000000000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048804) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) 06:16:28 executing program 4: unshare(0x20000600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) r4 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdc01, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008260204c9655f474844146680bd61f988000029af0f000000000000000000000000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048804) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) 06:16:28 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="320c00a3978cd8b8f8f34ca5571bd7c04a1f009f000000000005760d"], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4c000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="520000090000000000000000aa69"]}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 06:16:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000022d, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x40, 0x4, 0x0, 0x1, {0xa, 0x4e23, 0x9, @private1, 0x2000}}}, 0x32) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @local}], 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000140)=0x9c) [ 300.516008][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.549242][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.582187][T13755] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 300.602966][T13755] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 06:16:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000013) [ 300.646276][T13755] IPv6: sit3: Disabled Multicast RS 06:16:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000012) [ 301.210997][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 301.211011][ T28] audit: type=1804 audit(1591942589.282:257): pid=13769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir973203008/syzkaller.nMI7ej/88/memory.events" dev="sda1" ino=16267 res=1 [ 301.379367][ T28] audit: type=1804 audit(1591942589.322:258): pid=13773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir973203008/syzkaller.nMI7ej/88/memory.events" dev="sda1" ino=16267 res=1 06:16:29 executing program 2: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r3, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x7fc, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0xffffffffffffffff}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2911}, {0x8, 0x0, 0xb7d5}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x79c1}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IE={0x78c, 0x2a, "e718d4a46297a4f73c97022d68b71a23b365da75a43aa3bad3ad9f37249a03f5462bd331c56b9426ae5dc1c8cc3b78cd8deb7b5f41b1d583936e6fc2b3b03a76251f64175f9f7a8663ee306e9a0422497f497ebf4a85d741c4ded14ce4a043c4ed9f811e3f00b0e55239b1d478ab995fb9ef91694fa039d5d1281bc7b41e01eabc603ee0bcd29c98c6bebc523cbc686bb13adaadb3984a2b75a7e323096c2d6009d92aa5dcf4f5d360d62942060b9b9d0732071bc4d8029396658a5aed53f949f51d5b1ba670b2d1e0deecd19cb47e9cb5ac8464baabe342308efc0da8a99c4a0b2f1e7f634d2b372eb5b86ba5d97a752bbf856d951a15fab393d41a7238e50d63b80809842e664bb05c6eaf8c8bd485ba5bce5acb14445b62451ac477d1eb52115e228a3d9302cde82aaf1e42f2395efb5037f8ade4c54b9b3f2a471ad2ab2985d1c9ae9f9003dbdb467bbc3b63778a9c7438bee63a7da856605cf22a1c1f5592b9ae555554ee4ccd2d6031a966302aa59b2abc0e6bfed288100544682dba8ae76d5e8e2dfc95f762a109e647a7141b6542e6f537dedf4206a370cbf896dfa46b5d71a357f6b4fec077fc15cdd075137e099c84ec9f59a8b5d2795ae5850fec84c0fefe1e993e7611295b6d7aa5e23177d759020b269fad620499b6aae653b5f72fa1751fa9cba661f6a8bcdf5b63923987291ba208ea4ba9254b7db8f6a4152a1f5b43cadc2a539d9d5a08c051290121515da26dca7b625dacc726140bd1b6c7b843f8b647768cfe2a436bc50736b16776694aa555f4c97cd26926e07de33d2072cc4ed5100f2287fdbc57d1facbf94be3d2740594d19fd0eeccd69f74a65fa371199a568b31b93f588ec4a9443fd2bb6d2f5390f90ec1f96d6485cbad5c765678cdef28a292ac304ad8d17fe1fb477662cca040037f2866d264bc97821d3a3aca5a4695b165433137110ad01adf5eeeea1cbc292e3879dc92c3e1b5119563b30028db859c85ace267a7f2067ee5c8dc16294d9f576f109e2df0108b7c909f92b6b716d4a7be656b1e56d573135104efd2dc540e6ad5414d451ab1280dbb6d6c632d060f98dc4b22d26851895394ab48313b1f1ccd70c0b828f7475cba9a1f1f7c6d04131f9b5c40497e64db92a887624c1dfea49989a61bfa37ec14615142e185f5cd97d18d237e353e0e005af20efca6e06269ea0bc3b65c182e8fb7072fb154ed57a26ce082fc3e9d596274f961ba71cce4ae9ae693fe5a1d069595965131def76ce792c6f7eca98ca777040c57c78d707bd4eeee2eec5a92f3a32b0b81183f116c3043de5b6ee28ea0200f0db9ae73894080125abba48d293c27ef7072179c3f7210177a06a63dc36c47e63c3affddbc3747846f0ebce7ab1020c009cc353aa5574a344fd1b2a81438b7a097f6e178abeff4b4eac508dce94e6b52b7bd616075344ac26896b84a5ae8829e20397608e819a56941911e9b2d4dd79840186c463059b95b4482e9149672ed3eeb12f7787f782bb2ccfd60daff284a2e479fb603c13da77040ea9dc4b7174778f48bca0ba098d6821c3648cab3f704a4701c2d57eaab3e933da8601065d880b9b929810ff65a211ece3d2fc465b264332ac119fd6a822c2527e4be42c6e20dcc46fec89b289dc2dc5b43ca55cf6c245a412dca94dc468ce410762ba8b163ed6f245665ebb3160002e2af493bb82e14c76eb02bc80ddfcbb2cb99143251d28067c22cdf46f0cf6b1fd974740ac28f1aa35d92b2cccde5dada30a05895b82af11b087f2f02dbe55aca5db5a41765abbad4dad2c03bbe40a05af71bfc1ae7ba694bb1a5a77e1c9e62833c45287b2b10f91701d33a9fe46db62b1523f8c58e33ccbd611c2f9693cfb1296be3afda2421ee7ede7dc8ae8e5320ea17381cb6af733b9c3336719358cfa77db18e30b775df2403e560eef711b030b2cd3e08b11c3c4a984fb84e68770779af53f5d15758c1931bd8d8a6ee140a7abc7a0f87ad2840440cba8d0d36fc0f1cb5cc43dff62fdb445f0e2884bd68c06e4fffda790963cfc717693ed3abf6463097a7c7d343d7401bf59ed6aa52425683e085dfede7951aa30d282822f7acbc7ab146caf43138e76717b9f30ad7b3d7623216c51e00b23a9326fb24202348a2d3c9081dfaea895c56fd9c21bf406e0b283925cc9733b785bac78e8945497b3f52fa169ba925560ea9d9bdc942e7f02db6dd89e283ece873f6365100b1f7d62cf12639d20aa3d6aef4d5899757d4eedd0300fa1d8cc312dbc28674bff6749e83080aaf201506051bc6f3599497e7c7a392101369d98a9ff87e443d5c69d611b7197144ebda36fef3d58ab1bcff7fc23162bd313d0a67ca45007f2dcf5025663fbd46badbe987d6736f8cac7190cf73a37f5ca06907960d775338ead93324553e428b8548a42c00687338349695be5635d96d3f07d7391c57f9d51f1fe5a1ad6475511eb5a35399f94ecdcf41268d79d8e1a196040dbb1446b3ae16818e337575b3bd75e11bee6dd795d553c5b8fd69d486e44034c6ac4e77cb7b53010c73576f0e0be86f074f62cb4c2978b951532946f21e942acefbf8d7756b069d1033b75b4c9052fded457b021753c903cd7fdcb10622c79268c3cec8c9fd55b99a32b948a760b59f34f16fcdb09c5835fab5b43eddff26ab3bfcc06e6677990012b4862926ce563ce4059b990f7f1877fc4e44c8e22f943c"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x20, 0x61}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 06:16:29 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000180)=""/249, &(0x7f0000000000)=0xf9) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f00000000c0), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@private2, @in6=@empty, 0x4e21, 0x8001, 0x4e24, 0x9db, 0x2, 0xa0, 0x80, 0x84, 0x0, 0xee01}, {0x1, 0x8001, 0x9, 0xffffffffffffff03, 0x9, 0x228fcf9a, 0x7, 0x200}, {0x1, 0x8, 0x3, 0x8}, 0x8, 0x6e6bb1, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x26}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x0, 0x1, 0x6, 0x134, 0x2, 0x7}}, 0xe8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x3, @empty}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, [], 0x4, 0x0}, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, 0xe8) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000004a00003c000000000001907864010100ac1408bb4414261827502a0b01e0ebff00000000007ff40001000000000d00907800000000000000000000000000000000040799a41920a9f152d43cf43e981078abadd09c462424a2ba0a6734fdaf9b8a2c1a84aa3197863550305c6b717d3089b498c392774a10f9f167e1f4ba7f330e23ea813955b4117943bef0e99a52be12ff42501ae29681ec426308c7f8aa91330389a376e1b576dba60822aff2990a58"], 0x46) 06:16:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000023) [ 301.663361][ T28] audit: type=1804 audit(1591942589.742:259): pid=13820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/123/cgroup.controllers" dev="sda1" ino=16228 res=1 [ 301.720978][T13818] IPVS: ftp: loaded support on port[0] = 21 06:16:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004084}, 0x4001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={0x0, 0x800}, 0x8) 06:16:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", ""]}, 0x14}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 06:16:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000340)=0x4) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) epoll_wait(r3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x2) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r9 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="5000ca02", @ANYRES16=r8, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000080009000100000008000a0000000000060002000100000014001f00"/74], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRESOCT, @ANYRESHEX=r9], 0x48}}, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f00100001500000029bd7000ffdbdf2506083c0001005ccf8894e0da81dab873b02ebffe9775a9605904cc29fa6db8c690ef878474d09706005976a5549db6b45968e0802b15bb427da0ef6db36d3400010067b92e68d6aeb4a860a25f9f78f13f99ba2c68056a53becdf9aba2ce577fae7264ed6dc6233f41154c637e5a5df8e01965000100df90dbfa2918714b9d8d79fef8210f5c669e81d5e872cbd7b7cda09c54c64c965a670e3e099c03929130457e916391f1ae9d4a7a1adae8c22f5a978dfb9684ab2324d5d819b50edd05eaceb8595ebcc2e1b3c6e99ca248aab35fef0089f17431d5000000530001006a11e05ca314b6a87265f21bff92af5e76a882d967335e90e281edb14b8b0c36facec35dbf853aa967719e53b70309802a382743d809d1c62a85e192d71bf0f4d551df92613045dd21851f36e00f5000ad000100eba6cf0f9c46c209ef84a39065ed88ec958789e11b0fea9fffd6f8ede2f2461256179c9fbd41e6cbc396d60e9367c64e6ae137ba857cd9ceaa027610eb0817a1fb80ccf1f18f7bf01f1f6649557066714cc645a8785248610a45cdb29ed3020a1118b9e78fb1c5658c51936eefed0c98e8ea1ef0cda53c12b61c77dc02355f7bdd1729ae4e32fe23c107489123f8da561d8fac2a26547d7a058112f59849c947120bb854c172d6133399e339914ec0f72e9219981359818d00000000005f344c7fd9c174a847b178faff4df5eb5f4842810fa7eb"], 0x1f0}, 0x1, 0x0, 0x0, 0x80d0}, 0x4005) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001100310f000000000000f9ffffff0008fdb30f4fd86cc21ee6e8304e64dd9b3ebb620584a3b7371f5e5b332a610488643e36d2920600d12788faa9e8e7ec1701c10101", @ANYRES32=r6, @ANYBLOB='\x00'/12], 0x24}}, 0x0) [ 301.999212][T13832] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 301.999461][T13835] IPVS: ftp: loaded support on port[0] = 21 [ 302.169815][T13833] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.207749][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.228884][T13878] can: request_module (can-proto-0) failed. [ 302.275017][T13842] bond1: (slave bridge4): making interface the new active one 06:16:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000f0) [ 302.317663][T13842] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 302.488545][T13886] IPVS: ftp: loaded support on port[0] = 21 [ 302.513337][ T28] audit: type=1804 audit(1591942590.582:260): pid=13895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/124/cgroup.controllers" dev="sda1" ino=16228 res=1 [ 302.614599][T13901] can: request_module (can-proto-0) failed. 06:16:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000115) [ 302.983414][ T28] audit: type=1804 audit(1591942591.063:261): pid=13907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/125/cgroup.controllers" dev="sda1" ino=16228 res=1 06:16:31 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x14, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 303.350840][T13833] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.386067][T13836] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 06:16:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000d000000000000ce310000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08e002000000a1a27141efba603b001b"], 0x34}}, 0x0) [ 303.494822][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:16:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01000b000020002b3900340012800b000108207c6164676500000410"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000c00", @ANYRES32=r11, @ANYBLOB="000000009cea8307"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34002802", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf251c00000008000300", @ANYRES32=r11, @ANYBLOB='\b\a\x00\x00', @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000100ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) [ 303.679918][T13935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.701847][ T28] audit: type=1804 audit(1591942591.773:262): pid=13909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/125/cgroup.controllers" dev="sda1" ino=16228 res=1 [ 303.756105][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:16:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000001fe) 06:16:31 executing program 1: r0 = socket(0x400020000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000080)="76d7baa8e5b3ed311f0b859eb5cb351eee2d3578780e4bcedaf6c87e9860a7287cf98c3ae4fbb9016fd8d1e3ebd8647e647f8aee3dfbc17c153ffa7652d55cec3df633") [ 303.878206][T13954] bridge2: port 1(bond0) entered blocking state [ 303.890380][T13954] bridge2: port 1(bond0) entered disabled state [ 303.935825][T13954] device bond0 entered promiscuous mode [ 303.969589][T13954] device bond_slave_0 entered promiscuous mode [ 303.999910][T13954] device bond_slave_1 entered promiscuous mode [ 304.069209][ T28] audit: type=1804 audit(1591942592.143:263): pid=13962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/126/cgroup.controllers" dev="sda1" ino=16287 res=1 [ 304.115850][T13960] device bond0 left promiscuous mode [ 304.121370][T13960] device bond_slave_0 left promiscuous mode [ 304.160966][T13960] device bond_slave_1 left promiscuous mode [ 304.197252][T13960] bridge2: port 1(bond0) entered disabled state [ 304.291824][T13960] bridge3: port 1(bond0) entered blocking state [ 304.304050][T13960] bridge3: port 1(bond0) entered disabled state [ 304.356028][T13960] device bond0 entered promiscuous mode [ 304.385959][T13960] device bond_slave_0 entered promiscuous mode [ 304.415487][T13960] device bond_slave_1 entered promiscuous mode 06:16:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)=""/245, 0xf5}], 0x2}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xb4df5594, 0x0, 0x0) 06:16:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x5, 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800900010067726574926d0000240002800600020008000000050008000600000008000700e0", @ANYRES32=0x0, @ANYBLOB="73905f23a3f036c8a79cc3c3cd0f780553faaf06c20f87496fa4f26953cf1c80bb09a2a459b5c8825c9a0eabf9dbfb244d4e14dc95842e", @ANYRES32=0x0, @ANYRES16], 0x7}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@private1, 0x5a}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4d, 0x0, 0x0, 0x0, 0x3a, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x7ff}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r2, @in={{0x2, 0x4e24, @local}}, 0x200, 0xfff, 0xfff, 0x8, 0x5, 0x9, 0x5}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x3f}, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xfdef) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000003c0)=0x1) [ 307.422407][T13994] IPVS: ftp: loaded support on port[0] = 21 06:16:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4801000010001307000000000000000000000000000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) 06:16:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 06:16:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004084}, 0x4001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080), 0x4) 06:16:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c44e15f6c70e17fd626779e000000", @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f00"/86], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xb4, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x3ff800) writev(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) [ 307.607444][T14020] __nla_validate_parse: 3 callbacks suppressed [ 307.607467][T14020] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. 06:16:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000300)={{0x2, 0x2, @multicast2}, {0x0, @local}, 0xc, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'vlan1\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan1\x00'}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x637e}) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockname$netlink(r5, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x1, 0x9, 0xf1a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x2}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x28, &(0x7f0000000240)}, 0x10) syz_emit_ethernet(0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r6], 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/662, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x39d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 307.705224][ T28] audit: type=1804 audit(1591942595.783:264): pid=14019 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/127/cgroup.controllers" dev="sda1" ino=16298 res=1 [ 307.762558][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.835319][T14025] IPVS: ftp: loaded support on port[0] = 21 [ 307.860677][T13994] IPVS: ftp: loaded support on port[0] = 21 06:16:36 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="427434df0fe686"], 0x1}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="71d750e220b62bb0b89c1137c348bf5b", 0x10) 06:16:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000612) 06:16:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c44e15f6c70e17fd626779e000000", @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f00"/86], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xb4, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x3ff800) writev(r5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) 06:16:36 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5f20, @local}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0xa, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) close(r1) [ 308.428209][ T28] audit: type=1804 audit(1591942596.503:265): pid=14050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/128/cgroup.controllers" dev="sda1" ino=16290 res=1 [ 308.486527][T14057] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 06:16:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 308.856024][T14053] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 06:16:37 executing program 3: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000300)=0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)) pwrite64(r0, &(0x7f00000002c0)='^', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) socket(0x11, 0x800000003, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @multicast1}, &(0x7f0000000200)=0xc) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 308.926041][ T28] audit: type=1804 audit(1591942597.003:266): pid=14068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/129/cgroup.controllers" dev="sda1" ino=16280 res=1 06:16:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 06:16:40 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4004004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[@ANYBLOB="bbfbbbbbbbbbaaaaaaaaaabb004600005e00000000002f9078ac1414bbac1efc7056000000042065580000000000000800000086dd0002080088be000000001020000003d6794d13ef00000000000000080022eb0000000020fc000002000000000000655800000004"], 0x0) 06:16:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1600bd78, &(0x7f0000000880)=@raw={'raw\x00', 0x2001, 0x3, 0x218, 0x150, 0x150, 0x150, 0x228, 0x150, 0x228, 0x1e8, 0x1e8, 0x228, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'batadv_slave_1\x00', 'caif0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 06:16:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100001100) 06:16:40 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000240)=""/171}, 0x20) 06:16:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004084}, 0x4001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) [ 312.546992][T14099] IPVS: ftp: loaded support on port[0] = 21 06:16:40 executing program 3: unshare(0x60020200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 312.583665][ T28] audit: type=1804 audit(1591942600.663:267): pid=14097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/130/cgroup.controllers" dev="sda1" ino=15795 res=1 06:16:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xbfa8, 0x0, 0x0, 0x800e0053e) shutdown(r0, 0x0) 06:16:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b6967335", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e1c0c3e002ffa73b9af663a0000000018000000000000001701000004000000060000000000000018"], 0x60}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001ec0)=""/102400, 0x19000}], 0x1}, 0x0) [ 312.797379][T14115] IPVS: ftp: loaded support on port[0] = 21 06:16:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100001b00) 06:16:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 06:16:41 executing program 2: r0 = socket(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f0000000040)) 06:16:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) [ 313.130148][ T28] audit: type=1804 audit(1591942601.203:268): pid=14154 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/131/cgroup.controllers" dev="sda1" ino=16018 res=1 06:16:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="2b0aad91204e675eb3b4473591ade3c2", 0x10) 06:16:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 06:16:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100001f00) 06:16:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x201, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}}, 0x0) [ 313.697071][ T28] audit: type=1804 audit(1591942601.773:269): pid=14182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/132/cgroup.controllers" dev="sda1" ino=16002 res=1 06:16:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004084}, 0x4001) 06:16:42 executing program 3: r0 = socket$inet6(0xa, 0x800000000000802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 06:16:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002400) 06:16:42 executing program 1: r0 = socket(0x10000000011, 0x8000000003, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x2000, &(0x7f00000000c0)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000540)="db29b8d16d3ab5a05365eb71986c33c754593e0ae848aaa99b2918dc5bf4e4b001cedf2bc5e45ed387043f36d94ac3eeeb913b4b33798b527d433e930d4468870393605047be4cfcbdea3bcf81bdd1b1328870727ed82a3c51619d8d53cabf8c1e0fdf09bb867c53e42f3cc5d894ea12181a35b49f63e41083231fa4c7a82993b97fc13aa370617a30dd57f20000000000", 0x91, 0x0, 0x0, 0x0) 06:16:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r1, 0x20f, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 314.065278][T14195] IPVS: ftp: loaded support on port[0] = 21 06:16:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) [ 314.135066][T14203] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 314.160669][ T28] audit: type=1804 audit(1591942602.233:270): pid=14205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/133/cgroup.controllers" dev="sda1" ino=16302 res=1 06:16:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x60}], 0x1, 0x0) 06:16:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="50000000000101040000000000000000008000003c0002802c000180130003"], 0x50}}, 0x0) 06:16:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0x42) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 06:16:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0), 0x6) [ 314.460588][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 06:16:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002500) 06:16:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 314.511774][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.700973][ T28] audit: type=1804 audit(1591942602.774:271): pid=14248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/134/cgroup.controllers" dev="sda1" ino=16302 res=1 06:16:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 06:16:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 06:16:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000815, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 06:16:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100004000) 06:16:43 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000080)) 06:16:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) [ 315.694079][ T28] audit: type=1804 audit(1591942603.774:272): pid=14273 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/135/cgroup.controllers" dev="sda1" ino=16313 res=1 [ 315.715053][T14276] IPVS: ftp: loaded support on port[0] = 21 06:16:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 06:16:44 executing program 2: r0 = socket(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x64, &(0x7f0000000100)="01000000", 0x4) setsockopt(r0, 0x0, 0x65, 0x0, 0x0) 06:16:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 06:16:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100004100) 06:16:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x0, 0x0, 0x0, 0xa00}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x3fffffffffffe66, 0x0) [ 316.704838][ T28] audit: type=1804 audit(1591942604.784:273): pid=14322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/136/cgroup.controllers" dev="sda1" ino=16147 res=1 06:16:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) socket$netlink(0x10, 0x3, 0x0) 06:16:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 06:16:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) 06:16:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10) 06:16:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="ee"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) 06:16:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0xc03}, 0x14}}, 0x0) 06:16:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008100) 06:16:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) 06:16:45 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000040)) [ 317.067441][T14338] IPVS: ftp: loaded support on port[0] = 21 06:16:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:45 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 06:16:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 06:16:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) r4 = socket(0x2c, 0x6, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000170a010200000000000040000f000005080007400000000108000740000000000900010073797a31000000000900010073797a3000000000"], 0x3c}}, 0x20004800) 06:16:46 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 06:16:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f000) 06:16:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860073ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:16:46 executing program 1: syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffffdffffffaaaaaaaaaa008100000008060001080006040001aaaaaaaaaaaaac1414aaaaaaaaaaaa00ac1414aa"], 0x0) 06:16:46 executing program 1: socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'lo\x00', r2}) [ 318.127237][T14395] IPVS: ftp: loaded support on port[0] = 21 06:16:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000200)=""/107, 0x6b}], 0x1) 06:16:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 318.189600][ T28] audit: type=1804 audit(1591942606.264:274): pid=14397 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/138/cgroup.controllers" dev="sda1" ino=16345 res=1 06:16:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) 06:16:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fff0) [ 318.777161][ T28] audit: type=1804 audit(1591942606.854:275): pid=14437 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/139/cgroup.controllers" dev="sda1" ino=16333 res=1 06:16:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) socket(0x2c, 0x6, 0x0) 06:16:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x2001, 0x3, 0x2c0, 0x150, 0x150, 0x150, 0x228, 0x150, 0x228, 0x1e8, 0x1e8, 0x228, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x8f, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'tftp-20000\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'batadv_slave_1\x00', 'caif0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x320) 06:16:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 06:16:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffff000) 06:16:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 319.235559][T14457] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.4'. 06:16:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) [ 319.288696][T14460] IPVS: ftp: loaded support on port[0] = 21 06:16:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 319.330031][ T28] audit: type=1804 audit(1591942607.404:276): pid=14459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/140/cgroup.controllers" dev="sda1" ino=16337 res=1 [ 319.357526][T14465] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.4'. 06:16:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 06:16:47 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000001a00)="d8", 0xfffffdbb}], 0x1, 0x0) 06:16:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x80000004}, 0x14) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x140006, 0x0) 06:16:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) 06:16:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) 06:16:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1ffffff1f) 06:16:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) 06:16:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1}, 0x18) [ 320.568186][T14528] IPVS: ftp: loaded support on port[0] = 21 [ 320.584024][ T28] audit: type=1804 audit(1591942608.664:277): pid=14524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/141/cgroup.controllers" dev="sda1" ino=16360 res=1 06:16:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x38}}, 0x0) 06:16:48 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r0, 0x107, 0x65, 0x0, &(0x7f0000000040)) 06:16:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 06:16:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) 06:16:49 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) socket$netlink(0x10, 0x3, 0x0) 06:16:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb9460a480e0a10000000e3bd6efb250009000e00030040fe00ff050005001201", 0x2e}], 0x1}, 0x0) 06:16:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffffff0) 06:16:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x58) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) 06:16:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1) shutdown(r0, 0x0) 06:16:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="50000000010101040000000000000000008000003c0002"], 0x50}}, 0x0) 06:16:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 321.792521][ T28] audit: type=1804 audit(1591942609.874:278): pid=14583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/142/cgroup.controllers" dev="sda1" ino=16366 res=1 06:16:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) write$tun(r0, &(0x7f0000000240)={@void, @void, @eth={@multicast, @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}, 0x26) 06:16:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c0000000001ff050000000000000000000000003c0001002c00010014000300c500000000000000000000000000000114"], 0x8c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0xf000}, 0x0) [ 321.846258][T14592] IPVS: ftp: loaded support on port[0] = 21 [ 321.940919][T14596] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 06:16:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 322.027174][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 06:16:50 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000040)) [ 322.085899][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.154305][T14625] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.215528][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:16:50 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x1c) 06:16:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 06:16:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000c73b80000026000000000400002700000000f900009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_genetlink_get_family_id$batadv(0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6e803, 0x0) 06:16:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x210}}], 0x1, 0x0) 06:16:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}}, 0x0) [ 322.830205][ T3528] tipc: TX() has been purged, node left! [ 322.908248][T14653] IPVS: ftp: loaded support on port[0] = 21 [ 322.917491][ T3528] tipc: TX() has been purged, node left! 06:16:51 executing program 2: r0 = socket(0x11, 0xc003, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005016000009005001b000700000032481cfecea10500fef96ecfc73fd3017ae36caa0416fa4f376336acf00b7804be381e4991f7c8cf5f882bfeca3ed7c257699a1f818000c016be0102db56133e27acb5d602000d7d026ba8af630037282502000000720000abfbb770c1f5a872c881ea772ec589436a4d47844b404f361b1257aea8c500002002000000001b68ca6b3776a296e2a189f300080000000000000600000100"/177, 0xb1, 0x0, 0x0, 0x0) 06:16:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 322.937987][ T28] audit: type=1804 audit(1591942611.014:279): pid=14649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/143/cgroup.controllers" dev="sda1" ino=16370 res=1 06:16:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 323.040549][ T3528] tipc: TX() has been purged, node left! [ 323.047309][ T3528] tipc: TX() has been purged, node left! [ 323.083113][ T3528] tipc: TX() has been purged, node left! 06:16:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/613], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x30, 0xe, 0x0, &(0x7f0000000140)="e460cdfbef2408000000fd9286dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 323.129142][ T3528] tipc: TX() has been purged, node left! [ 323.165309][ T3528] tipc: TX() has been purged, node left! [ 323.205372][ T3528] tipc: TX() has been purged, node left! 06:16:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 323.350155][ T3528] tipc: TX() has been purged, node left! [ 323.470166][ T3528] tipc: TX() has been purged, node left! [ 323.570185][ T3528] tipc: TX() has been purged, node left! [ 323.581434][ T28] audit: type=1804 audit(1591942611.664:280): pid=14694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/144/cgroup.controllers" dev="sda1" ino=16161 res=1 [ 323.700360][ T3528] tipc: TX() has been purged, node left! [ 323.880469][ T3528] tipc: TX() has been purged, node left! 06:16:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) 06:16:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:52 executing program 2: pipe(&(0x7f00000000c0)) 06:16:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f00000001c0)=0x1, 0x2a) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x2400c875) 06:16:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000c73b80000026000000000400002700000000f900009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_genetlink_get_family_id$batadv(0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="f46cbd20fd4b1cbce1a13485b90f59ea6f6ff7d1d49d49638713fdb1f9948a1c0b6f3fe3d61a2acf22d1366859278aeff3d7877b013f83663b0b10f2a41ede88514b50e870f171bf281675932c38887237a754b1bd142f633071c6621340274ad26fec3bca58a92c7a867327e91084834ea6e49a916be86a997789b25ceec3a9ff834cf36c1ffc120777c2f6d1216b5b23985b4d7df305bf6cdf43cc3b319f76429b45aa7ce56ebeb46a5d2968b8abe4ec5436fdd6b685ce3c63ca248d995177ac0d4bdc074e70f32c4e750b11fb6a240e770da692e8015ee679bc9a3bf1a852b280f5f673ac8f9fe986ee48fb7aeb7062de7224aad9966d454cc69a96", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x0) splice(r1, 0x0, r0, 0x0, 0x6e803, 0x0) 06:16:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r9}}, 0x20}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="47ff69873831c9d86e9b88369b41c25ff393eaa0fbaabdb5bc", 0x19}, {&(0x7f0000000180)="a297ade96d0b353c6b49a25c8d8a7213a1ee5fada4f0b36c110c97fc70872060f5e71d91e4612640d22e667ce362cf1e78d5d8ac65c287fc66d0d89784c4552e6e67b3020b9ef1d0db4d640ed079b7db5188968c02535a831687722caef3482470ed8012649fabf64968478dbe8d29c78b8e571f89d124025c2d72d5ddb27a281c308186f44b8df2a7962ac07e5a18fe8ec639faef74846f7e71b8f8dd4097ec547a09c74aea83896d8cb90944348c45acde64ba19a3008bcddc906d3c452e67c4bec8ddf1c6b5bdcdf2456e265ebf3025c3f4590c93e6fc65c322", 0xdb}, {&(0x7f0000000280)="5fba5f075d71f6391f37e5e4358069b813b6a72a31fbab1bbf8bbd79926393aae4d739908e0fd186e1b4261511d2563586319b586067189a592a5d9057b496dad3b8ab58242515fa43eb8d7aa0d1a121867992ae64848d9d3eacd043732cbf7254fc76017f9e78614006e73e7d31fb647819dd2f005b0a5dbec7baee930be2208226f1f977286b1af5f2c68affa464f83fb24e62353e8ad6767b29f4e5257456ec3cbf96cf", 0xa5}], 0x3, &(0x7f0000000400)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x5c, 0x1, [], [@enc_lim={0x4, 0x1, 0xe2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts={{0x1100, 0x29, 0x37, {0x73, 0x21c, [], [@padn={0x1, 0x1, [0x0]}, @generic={0xf1, 0xd8, "b668b83b2ae40abc7f9a9950b7f351d37c0ad08c182a3febc1990e3a791f51ce64a6afbf10ff3c2be2522945b72dfaa9613cbffaad9959423fc9f17856bf17a27db58a3b882f889454cb21a18cd566431a7315fe902e3da82cd806502dde30227f13bdf31a835b014ff0d29c996f4937e5cdc2850b27c7024c07092aefa4b27982ed1e9eceaf4214abae98578783c8ab83f72577dd991be2c847a8ef3d3960723262023cb0a5f33918eb401ab18b196e663f9a2a105d4a20965534231551a61c191f8706fe5e87702b8559349a6bf41aa0b11749aa8f71c8"}, @generic={0xa2, 0x1000, "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"}, @pad1]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2f, 0x4, [], [@ra={0x5, 0x2, 0x4000}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2e}}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x1, 0x0, [@private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @local}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xc0000}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2f, 0x5, [], [@enc_lim={0x4, 0x1, 0x20}, @pad1, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x8d}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x16, 0xb, [], [@enc_lim={0x4, 0x1, 0x3f}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x0, 0xe, 0x54, 0x3, [0x3f, 0x7, 0x2, 0xe1, 0x763196ca, 0x0, 0x81]}}]}}}], 0x12d0}, 0x20004090) 06:16:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2, @ANYBLOB="0080000000800000f2ff0000080001fa77333200c0010200bc0101"], 0x1ec}}, 0x0) [ 324.153115][ T28] audit: type=1804 audit(1591942612.234:281): pid=14710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/145/cgroup.controllers" dev="sda1" ino=16372 res=1 06:16:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b70200000b400000bfa300000000000007020000fffeffff7a03f0fff8ffffff79a4f0ff00000000b706000000000081ad640500000000007502faff070000000404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000004295000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1065b57242c9ff215a010c2ceaea4c1dc908abb6e7325ec1956bd8700bf36628dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d6afab418e4682b2aec5e4a35629e8eb040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceaf16ddb64963d85791814cd59c7e0b8f6f5e6ee7a39e180b5a18ed78452ace71534fbd5bf227ec6b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df7b13b9f7fe4f41a62df9b4c03e53466fac6b7212c8d944f22d8c19f958e8b34de35949a7a66ce18799ee53da177a81ea65e65021d71b7ee86a75bb32935f542127a8f8438feecbb1c757f7169f006f3f5c95177fbd0b14b3625962905ef911785c87238001fcf72eba5057d78d1c30c8938cc0c4a11cb136d8a6084d676d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c09af4fcc9661c80c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70a80cce69df30d3d67d84ccf3f9db0000000000000000153c989ef1008790e6b743106ad4448b1228dfce8f59cabd6075b2201803785a51af5d67632d0db913c15f5754f02f1a94196574d5bb3d99b9f71340f63a98d15afcf50414c722fccf1a5a9c03bde2d6d458c03c0000002f32ad00000000004477b531fd02da3b0994db083b1957cfe24e478b68a7ea0ab3a43616a6b8003e3e052cbde31f49ca3ba763ebfec52b1fbf63f7330f3643f403b942cb49ec25b2d35a8af9916a40469a82c257d65e936cbcd2d6cdfbe3103cf42145366916526c0eb87921d263d0ebe5f259767608f770e2cdb5d23f30"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 06:16:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 324.195364][T14718] IPVS: ftp: loaded support on port[0] = 21 [ 324.227301][T14719] bridge22: port 1(bond0) entered blocking state [ 324.258786][T14719] bridge22: port 1(bond0) entered disabled state [ 324.318375][T14719] device bond0 entered promiscuous mode [ 324.360728][T14719] device bond_slave_0 entered promiscuous mode [ 324.395499][T14719] device bond_slave_1 entered promiscuous mode 06:16:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 324.435926][T14726] device bond0 left promiscuous mode [ 324.441621][T14726] device bond_slave_0 left promiscuous mode [ 324.461655][T14726] device bond_slave_1 left promiscuous mode [ 324.476821][T14726] bridge22: port 1(bond0) entered disabled state 06:16:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 06:16:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 06:16:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETFILTEREBPF(r0, 0x800454df, 0x0) 06:16:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 06:16:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:53 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @empty=0xac1414aa}, {0x0, 0x0, 0x8}}}}}, 0x0) 06:16:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') accept4(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)={r5, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r5, 0xfffffc00}, &(0x7f0000000200)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$unix(0x1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) 06:16:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 06:16:53 executing program 2: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004fe9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000000080)=""/13, 0xd}, {0x0, 0x7ffffffff000}], 0x4, &(0x7f0000000240)=""/62, 0x3e}, 0x0) 06:16:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 325.367857][T14783] IPVS: ftp: loaded support on port[0] = 21 [ 325.387407][ T28] audit: type=1804 audit(1591942613.464:282): pid=14777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/146/cgroup.controllers" dev="sda1" ino=16373 res=1 06:16:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="ee"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}]}}]}, 0x74}}, 0x0) 06:16:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r0, &(0x7f0000000400)={@void, @void, @ipv6=@udp={0x0, 0x6, "ac347b", 0x207d, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private0={0xfc, 0x0, [], 0x1}, {[@srh={0x29, 0x2, 0x4, 0x1, 0x0, 0x10, 0x80, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @hopopts={0x87, 0x403, [], [@pad1, @generic={0x2, 0x1000, "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"}, @ra={0x5, 0x2, 0x6000}, @generic={0x4, 0x1000, "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"}, @hao={0xc9, 0x10, @mcast1}]}], {0x4e21, 0x4e22, 0x3d, 0x0, @gue={{0x1, 0x1, 0x3, 0x3f, 0x0, @void}, "bb5de7fecee15e680cdf823af3e42b5789645b9431bc4d0ecd055b31d3e6db65ff6c1eab9566c64da0f25ee93faa12d3e1"}}}}}, 0x20a5) sendfile(r2, r1, 0x0, 0x100000001) [ 325.991899][ T28] audit: type=1804 audit(1591942614.074:283): pid=14830 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/147/cgroup.controllers" dev="sda1" ino=16372 res=1 06:16:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) 06:16:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) 06:16:54 executing program 1: 06:16:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:54 executing program 2: 06:16:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x15, 0x2, 0x5e) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000000c0)=0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="37202915bb4604b61e62db80219406bf89000000", @ANYRES16=0x0, @ANYBLOB="00080000000000000000010000000500070002000000080009000000000014002000ff02000000000000000000000000000108001900e0000001060002000100000014001f00"/86], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x60}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendfile(r2, r4, 0x0, 0x100010001) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x1, 0x4) 06:16:54 executing program 4: 06:16:54 executing program 1: 06:16:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 326.466514][T14849] IPVS: ftp: loaded support on port[0] = 21 06:16:54 executing program 2: [ 326.563199][ T28] audit: type=1804 audit(1591942614.644:284): pid=14850 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/148/cgroup.controllers" dev="sda1" ino=16376 res=1 06:16:54 executing program 4: 06:16:54 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:55 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socket(0x0, 0x0, 0x0) 06:16:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) recvfrom$inet(r0, &(0x7f00000000c0)=""/83, 0x53, 0x121, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 06:16:55 executing program 1: 06:16:55 executing program 4: 06:16:55 executing program 2: 06:16:55 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:55 executing program 4: 06:16:55 executing program 2: 06:16:55 executing program 1: 06:16:55 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 327.562309][ T28] audit: type=1804 audit(1591942615.645:285): pid=14901 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/149/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 327.632662][T14902] IPVS: ftp: loaded support on port[0] = 21 06:16:55 executing program 2: 06:16:55 executing program 4: 06:16:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:16:56 executing program 1: 06:16:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000140)={r6, 0x0, 0x20}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x7, 0x40}, 0x8) 06:16:56 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:56 executing program 4: 06:16:56 executing program 2: 06:16:56 executing program 1: 06:16:56 executing program 4: 06:16:56 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:56 executing program 2: [ 328.533642][ T28] audit: type=1804 audit(1591942616.615:286): pid=14955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/150/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 328.563700][T14954] IPVS: ftp: loaded support on port[0] = 21 [ 328.596862][T14953] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 328.645511][ T28] audit: type=1800 audit(1591942616.615:287): pid=14955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16377 res=0 [ 328.647718][T14953] File: /root/syzkaller-testdir599089010/syzkaller.yQLGpU/150/cgroup.controllers PID: 14953 Comm: syz-executor.5 06:16:56 executing program 1: 06:16:56 executing program 4: [ 328.803301][ T28] audit: type=1804 audit(1591942616.645:288): pid=14953 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/150/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 328.932300][ T28] audit: type=1804 audit(1591942616.675:289): pid=14955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/150/cgroup.controllers" dev="sda1" ino=16377 res=1 06:16:57 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:57 executing program 2: 06:16:57 executing program 1: 06:16:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r0, 0xa29fa000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:16:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:16:57 executing program 4: 06:16:57 executing program 2: 06:16:57 executing program 1: 06:16:57 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:57 executing program 4: [ 329.573057][T15006] IPVS: ftp: loaded support on port[0] = 21 [ 329.582209][ T28] audit: type=1804 audit(1591942617.665:290): pid=15007 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/151/cgroup.controllers" dev="sda1" ino=16372 res=1 06:16:57 executing program 2: [ 329.695250][ T28] audit: type=1800 audit(1591942617.695:291): pid=15007 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16372 res=0 06:16:57 executing program 1: 06:16:57 executing program 4: [ 329.814195][ T28] audit: type=1804 audit(1591942617.695:292): pid=15004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/151/cgroup.controllers" dev="sda1" ino=16372 res=1 06:16:57 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:58 executing program 2: [ 329.979260][ T28] audit: type=1804 audit(1591942617.775:293): pid=15010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/151/cgroup.controllers" dev="sda1" ino=16372 res=1 06:16:58 executing program 1: [ 330.109003][ T28] audit: type=1800 audit(1591942617.775:294): pid=15010 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16372 res=0 06:16:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:16:58 executing program 4: 06:16:58 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:58 executing program 2: 06:16:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358bc924122d999da1000e9000000000047"], 0x1}, 0x1, 0x0, 0x0, 0x4000005}, 0x48080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000ffdbdf250800000008000800ac1414bb08000c000000000014000600fe880000000000000000000000000001080004000300000008020000001e000106000b0002000000000000000200000014000500fe880000000000000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2bd8d94f85e9ea62) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81135840}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r6, 0x100, 0x70bd2a, 0x8, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x81, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '-^\\V{*\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000) 06:16:58 executing program 1: 06:16:58 executing program 1: 06:16:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:58 executing program 2: 06:16:58 executing program 4: [ 330.582361][T15056] IPVS: ftp: loaded support on port[0] = 21 [ 330.607961][ T28] audit: type=1804 audit(1591942618.685:295): pid=15055 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/152/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 330.620671][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:58 executing program 1: 06:16:58 executing program 4: 06:16:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:16:59 executing program 2: 06:16:59 executing program 1: 06:16:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:16:59 executing program 4: 06:16:59 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:16:59 executing program 1: 06:16:59 executing program 4: 06:16:59 executing program 2: 06:16:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 331.489156][T15104] IPVS: ftp: loaded support on port[0] = 21 06:16:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000009010100000000000000000c000000070006400000000008000640000000010800034000000040"], 0x2c}}, 0x804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 06:16:59 executing program 4: [ 331.851072][ T28] audit: type=1804 audit(1591942619.935:296): pid=15126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/154/cgroup.controllers" dev="sda1" ino=16374 res=1 06:17:00 executing program 0: unshare(0x40000000) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:00 executing program 1: 06:17:00 executing program 2: 06:17:00 executing program 4: 06:17:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x20000880) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 06:17:00 executing program 1: 06:17:00 executing program 4: 06:17:00 executing program 2: [ 332.386497][T15153] IPVS: ftp: loaded support on port[0] = 21 06:17:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x18}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x4044000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000100)=0x2, &(0x7f0000000180)=0x4) sendfile(r5, r4, 0x0, 0x100000001) 06:17:00 executing program 2: 06:17:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:01 executing program 1: 06:17:01 executing program 4: 06:17:01 executing program 2: 06:17:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x4, 0x800, 0x80000001, 0x9, 0x101, 0xf4fe}, &(0x7f0000000100)={0x4, 0x5, 0x1, 0x3, 0x8, 0x10000, 0x10001, 0x6}, &(0x7f0000000180)={0x8, 0x0, 0xf3, 0x228c, 0x8, 0x4, 0x100000000, 0x4}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0xee7]}, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:01 executing program 1: 06:17:01 executing program 4: 06:17:01 executing program 2: 06:17:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:01 executing program 2: 06:17:01 executing program 1: 06:17:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:02 executing program 4: 06:17:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:02 executing program 2: 06:17:02 executing program 1: 06:17:02 executing program 4: 06:17:02 executing program 1: 06:17:02 executing program 2: 06:17:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 334.294617][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 334.294632][ T28] audit: type=1804 audit(1591942622.375:299): pid=15224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/158/cgroup.controllers" dev="sda1" ino=16373 res=1 06:17:02 executing program 2: 06:17:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:02 executing program 4: 06:17:02 executing program 1: 06:17:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/218, &(0x7f00000000c0)=0xda) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180009b843f9d4016ed05bc859e4efe6b51984c219017442a332ea85b35a566052d3ad3e0172d8f8ae140e6e390349dd4aff71ce07387cb243a02dafb130eff439efb81049201c72db563392399ad0f5751ef98be59982929739cae957"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:02 executing program 2: 06:17:02 executing program 4: 06:17:02 executing program 1: 06:17:02 executing program 2: 06:17:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:03 executing program 4: 06:17:03 executing program 2: 06:17:03 executing program 1: 06:17:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:03 executing program 4: 06:17:03 executing program 2: 06:17:03 executing program 1: 06:17:03 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:03 executing program 4: 06:17:03 executing program 1: 06:17:03 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x20, 0x0, 0xff, 0x7}, 0x20) 06:17:03 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 335.402453][T15280] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 06:17:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x1, 0x1, 0x0, 0x3f}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x76) 06:17:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 335.448282][T15285] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 06:17:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "ecde0d"}}) 06:17:03 executing program 0: socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x6, 0x0, @remote, @mcast2, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x6558, 0x6000}}}}}, 0xfdef) 06:17:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 06:17:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 06:17:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 06:17:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) 06:17:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xfc, 0xfc, 0xfc, 0xfc, 0x0, 0x1cc, 0x1cc, 0x1cc, 0x1cc, 0x1cc, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'team0\x00', 'vlan0\x00'}, 0x0, 0xc8, 0xfc, 0xa, {0x9000000}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'erspan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'macvlan0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) 06:17:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x8, 0x2c, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x5}]}}}}}}, 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 06:17:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) 06:17:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x700, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 06:17:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) 06:17:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}}, 0x0) 06:17:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 06:17:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x50, 0x4, 0x470, 0xf8, 0xf8, 0x1dc, 0xf8, 0x1dc, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'veth0\x00'}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@uncond, 0x0, 0x160, 0x1cc, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc, 'conntrack\x00'}, {{@ipv6=@remote, [], @ipv4=@empty, [], @ipv6=@remote, [], @ipv6=@loopback}}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "20390d5191ef6c3e476b0cc0f829610aab687a97ccc06ba96316e8049485430074ac887ae5d484ca881bc1097c5f159057e2d69efbfac943fccefb7564dc749c"}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4cc) 06:17:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 338.046542][T15367] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:17:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0) 06:17:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x9000000}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) 06:17:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c4ac, 0x0, 0x27) 06:17:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x18}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x74}}, 0x0) 06:17:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:07 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000100)) 06:17:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) 06:17:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c4ac, 0x0, 0x27) 06:17:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c001c000706010358d499a5cb06ff000100f5000500010047"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x2, 0x73) bind(r2, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000000e39293d30964fead347641938ff98fe9c3ff070000000000004714b50e4c82900e6333eb4cf0769bce87508217ab411a896ca3b756e6cdd7a6a393f87301000000000000001b27c1b7f903fce41240c6fac5cd0fc6", @ANYRES32=0x0, @ANYBLOB='\x00'/32]) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000e0a18a7e764fa2c20b50834f0008f11eaba01a152dcaadf1bce737e6fffce052e2000000", @ANYRES32=r3, @ANYBLOB="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"]) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000002c0), &(0x7f0000000300)=0x10) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000400000000106001d0001000000060002000100000014001f00"/86], 0x5c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000280)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x80, 0x9, 0x4, 0x80, 0xfffffff9, 0x4}, &(0x7f0000000240)=0x9c) [ 339.099193][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001200050700"/20, @ANYRES32, @ANYBLOB="000000000000000014002e"], 0x40}}, 0x0) 06:17:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 339.141497][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) [ 339.197933][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.208686][ T28] audit: type=1804 audit(1591942627.295:300): pid=15414 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/160/cgroup.controllers" dev="sda1" ino=16369 res=1 06:17:07 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 339.303641][T15425] netlink: 'syz-executor.4': attribute type 46 has an invalid length. 06:17:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 339.352133][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:17:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) 06:17:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) [ 339.459239][T15425] netlink: 'syz-executor.4': attribute type 46 has an invalid length. [ 339.475451][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:17:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20) 06:17:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000001500)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) [ 339.628418][ T28] audit: type=1804 audit(1591942627.705:301): pid=15438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/161/cgroup.controllers" dev="sda1" ino=16368 res=1 06:17:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 339.692831][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.788398][T15448] bridge5: port 1(syz_tun) entered blocking state [ 339.805867][T15448] bridge5: port 1(syz_tun) entered disabled state 06:17:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000600)={{0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20) [ 339.846014][T15448] device syz_tun entered promiscuous mode 06:17:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 339.895299][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 06:17:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100), 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:08 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 06:17:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) 06:17:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100), 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) [ 340.151672][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) [ 340.242539][T15472] bridge2: port 1(syz_tun) entered blocking state [ 340.262596][T15472] bridge2: port 1(syz_tun) entered disabled state 06:17:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830a00000016170a00875f4a83a0282fcc83a50e56c77ecb6e0f3b3f020fbd306871530228ca", @ANYRES32, @ANYRESHEX, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=r6, @ANYRESDEC, @ANYRESDEC], 0x4}, 0x1, 0x0, 0x0, 0x851}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb2039280}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c4d}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000040) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000b06010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000001) [ 340.324775][T15472] device syz_tun entered promiscuous mode 06:17:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100), 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 06:17:08 executing program 2: r0 = socket$inet6(0xa, 0x800000000000802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 340.580477][ T28] audit: type=1804 audit(1591942628.665:302): pid=15494 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/163/cgroup.controllers" dev="sda1" ino=16373 res=1 06:17:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000bc0)=""/15, 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)=""/125, 0x7d}, {&(0x7f0000000ac0)=""/151, 0x97}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/91, 0x5b}, {&(0x7f0000000e40)=""/260, 0x104}], 0x2}}], 0x3, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000100), 0xc, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0), 0xc, &(0x7f0000000b80)={0x0, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 06:17:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) 06:17:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000f8c0a939912331e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e000000180002800500160002000000040012"], 0x4c}}, 0x0) 06:17:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000601035b2574539b3635528658000000000000008c20b1e9da7614dae137d5fd5fdbd475bf0a3428e346f78b843c187f2a0108412ce9bd055f5d5d1dea8ef67d111ec0babe954984dcd91adc4deb1fad1c7c12401b647128a9bed8bad7c66b9b0323f857ff72587a24a0febfe835ced7e2d82fcabaa8fd5ffefbdfb8d6c5f2c5da498a1239da1c110dc56d7a0f5a0cb64c383064fe0567fc0b93817383a339bd29d22dd9bce859"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0) [ 341.284788][ T28] audit: type=1804 audit(1591942629.366:303): pid=15521 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/164/cgroup.controllers" dev="sda1" ino=16376 res=1 06:17:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffc8f, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000700070358d43a83587cff000100e9000500010047471e8c73d42a549475f9e51bd79a3ceaaadcc777d3b353cc2779dc0008000000000000db58e8e717c1e48ec649f351facd4651753c69697a1d43057d6b1528ae57f5b5ba529382fd0b7509f783f646240b2e7145cbf602000000ad12996f0add2e7de934adf98caf229d3c393459c8b14b9ad61953a6161828976f2aa0d8eae926b4f336db6d94ae46dee8f2b07088a0ca6073f0c189411b4fd76437e51453ee63c4d8b4669a8bde0206e16ed12fbdc7ee0000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000010601028bc2eb9a674f016e0200000405001200070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040021}, 0x20048001) sendfile(r2, r1, 0x0, 0x100000001) 06:17:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 341.921103][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.966783][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 06:17:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000025e000), &(0x7f0000a8a000)=0x4) [ 342.034474][T15529] device lo entered promiscuous mode [ 342.040270][T15530] device veth11 entered promiscuous mode [ 342.506285][T15524] device lo left promiscuous mode 06:17:10 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="ee18c5ddcd3d291f69157088bea500ea", 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 342.847923][T15530] device lo entered promiscuous mode [ 342.867214][T15529] device lo left promiscuous mode 06:17:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 06:17:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0xfffffffffffffc83) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x33, 0x9ee, 0x7, 0x40, 0x400, 0x0, 0x4, 0xfff7]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, "7db6183e62450c86651d494638"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x2, 0x73) bind(r5, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) accept4$packet(r6, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14, 0x80800) connect(r5, &(0x7f0000001880)=@can={0x1d, r7}, 0x80) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0xcc, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000300)=0x441, 0x2) sendfile(r4, r3, 0x0, 0x100000001) 06:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:11 executing program 1: r0 = socket$inet6(0xa, 0x800000000000802, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 06:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6ac9ed280300000000000000079c8d644b1cdf6fe621add996394dfbfea2432f40980d56490b5ccf468451999052caa8df204496384bb82b4d5c52dd8bf44109430b38d5faf405ef4386075542b201bdb6c43a2a9c20a338026d956dae36df97b133", 0x9f}, {&(0x7f0000000880)="9322d8b10c52a41207493f3648cd6ddf386b0108069a602211ed94bf7e9b85c88b0b2d36f7a573647f02", 0x2a}], 0x2}}], 0x1, 0x80) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x958, 0x11, 0x0, 0x27) 06:17:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) accept4$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r2, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000180)) 06:17:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0xe}}) 06:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="ee"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}]}}]}, 0x74}}, 0x0) 06:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 06:17:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', 0x0}) 06:17:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83cb3a2ce315d56d0d0500010047"], 0x1}}, 0x0) accept$packet(r0, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 343.594638][T15623] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:17:11 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x6000}, 0x0) 06:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 343.775022][T15625] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 343.825935][T15623] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 343.834565][ T28] audit: type=1804 audit(1591942631.906:304): pid=15664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/168/cgroup.controllers" dev="sda1" ino=15777 res=1 06:17:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) 06:17:12 executing program 1: r0 = socket(0x22, 0x3, 0x0) bind$packet(r0, 0x0, 0x0) 06:17:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 344.275900][T15623] bond1 (unregistering): Released all slaves 06:17:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'k'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) [ 344.403807][T15625] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 344.518037][T15720] bond1 (unregistering): Released all slaves 06:17:12 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 344.571041][ T28] audit: type=1804 audit(1591942632.656:305): pid=15666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/168/cgroup.controllers" dev="sda1" ino=15777 res=1 06:17:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000906010800000000000000000000000005000100060000000900020073797a30000000001c00078018000180140002"], 0x44}}, 0x0) 06:17:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 06:17:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind(r1, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)={r5, 0x0, 0x20}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000900)={0x2, 0x40, 0x204, 0x1, 0x400, 0x1, 0x9, 0x0, r5}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r0, 0xd3e88000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x1f, 0x80000, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r6, 0x0, 0x100000001) 06:17:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@x25={0x9, @null=' \x00'}, 0x80, 0x0}}], 0x2, 0x0) [ 344.967679][ T28] audit: type=1804 audit(1591942633.046:306): pid=15813 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/169/cgroup.controllers" dev="sda1" ino=16130 res=1 [ 345.003572][T15820] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 06:17:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000fb05010358d43a83587cff000100e90005000100f66c364cf7d0daf63447"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000100)=0x401, &(0x7f0000000180)=0x4) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000000c0)=0xf0af4603, 0x4) sendfile(r2, r1, 0x0, 0x100000001) [ 345.077827][ T28] audit: type=1804 audit(1591942633.116:307): pid=15822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/169/cgroup.controllers" dev="sda1" ino=16130 res=1 06:17:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:13 executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004fe9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000001400)=""/200, 0xc8}, {&(0x7f0000000080)=""/13, 0xd}, {0x0, 0x7ffffffff000}], 0x4, &(0x7f0000000240)=""/62, 0x3e}, 0x0) 06:17:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\''], 0x3c}}, 0x0) [ 345.285286][T15827] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 345.295554][ T28] audit: type=1804 audit(1591942633.376:308): pid=15869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/170/cgroup.controllers" dev="sda1" ino=16019 res=1 [ 345.339440][T15847] bond1 (unregistering): (slave bridge4): Releasing backup interface 06:17:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 345.418882][T15877] __nla_validate_parse: 3 callbacks suppressed [ 345.418892][T15877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x21d, 0x0, "ff61758a5264d9a14fb62fe6bce0eeb5025264c73c839e09f5ff08cccc6e3ffd7477f28557a8556964d283b24c2a2bb1dcc5a8d735eec48df90a55e5c0b3a337860cfd677448d1258641932ef7302d02"}, 0xd8) 06:17:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000024008b0d00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000280008801c0001000000000000000000000000000000000000000000010000001a000200feff00000b000100636c73616374"], 0x58}}, 0x0) 06:17:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 345.834658][T15847] bond1 (unregistering): Released all slaves [ 345.868208][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:14 executing program 0: socket$inet6(0x10, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860073ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:17:14 executing program 4: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="03"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000080)="8c", 0x1, 0x40400c5, 0x0, 0x0) sendmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="bd", 0x1}], 0x1}}], 0x1, 0x40001) 06:17:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) socketpair(0x3, 0x3, 0xe8f2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 06:17:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) [ 346.066721][T15926] IPVS: ftp: loaded support on port[0] = 21 [ 346.089545][T15931] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.122731][T15931] device lo entered promiscuous mode 06:17:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 346.147182][T15931] device tunl0 entered promiscuous mode [ 346.150853][ T28] audit: type=1804 audit(1591942634.236:309): pid=15929 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/171/cgroup.controllers" dev="sda1" ino=15889 res=1 [ 346.175916][T15931] device gre0 entered promiscuous mode [ 346.191525][T15931] device gretap0 entered promiscuous mode 06:17:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="60000000300001000000000000000000000000004c000100480001000900010067616374000000001c0002801800020002"], 0x60}}, 0x0) 06:17:14 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x2a8, 0x2a8, 0x2a8, 0xf8, 0x1d8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xff}}}}, {{@ipv6={@loopback, @dev, [], [], 'geneve0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "a8d4"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@private2, @loopback, [], [], 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) [ 346.198231][T15931] device erspan0 entered promiscuous mode [ 346.211535][T15931] device ip_vti0 entered promiscuous mode [ 346.269061][T15931] device ip6_vti0 entered promiscuous mode [ 346.306294][T15931] device sit0 entered promiscuous mode [ 346.324059][T15945] Cannot find add_set index 0 as target [ 346.342500][T15931] device ip6tnl0 entered promiscuous mode 06:17:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 346.376613][T15931] device ip6gre0 entered promiscuous mode [ 346.407527][T15931] device syz_tun entered promiscuous mode 06:17:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) [ 346.431770][T15931] device ip6gretap0 entered promiscuous mode [ 346.472842][T15931] device bridge0 entered promiscuous mode [ 346.495413][T15931] device vcan0 entered promiscuous mode [ 346.522595][T15931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 346.550959][T15931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:17:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind(r1, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000080000000000000000000108000a000000008ae4000002000100000014001f00"/86], 0x5c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000a80)={r2}) bind$bt_rfcomm(r4, &(0x7f0000000ac0)={0x1f, @fixed={[], 0x10}, 0xfe}, 0xa) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x1}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @NL80211_ATTR_WIPHY={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x50000}, 0x44000) sendfile(r6, r5, 0x0, 0x100000001) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x4085) 06:17:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 346.587807][T15931] device bond0 entered promiscuous mode [ 346.613797][T15931] device bond_slave_0 entered promiscuous mode [ 346.674313][T15931] device bond_slave_1 entered promiscuous mode [ 346.703561][T15931] device team0 entered promiscuous mode [ 346.723452][T15931] device team_slave_0 entered promiscuous mode [ 346.743723][T15955] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 346.757185][T15931] device team_slave_1 entered promiscuous mode 06:17:14 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000280)={0x6, 'ip6erspan0\x00'}) [ 346.781244][T15931] device dummy0 entered promiscuous mode [ 346.806063][T15931] device nlmon0 entered promiscuous mode [ 346.868610][T15931] device caif0 entered promiscuous mode [ 346.870694][T15958] IPVS: ftp: loaded support on port[0] = 21 [ 346.875266][T15931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.167687][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.798372][ T3528] tipc: TX() has been purged, node left! [ 347.998378][ T3528] tipc: TX() has been purged, node left! [ 348.280287][ T3528] tipc: TX() has been purged, node left! [ 348.330160][ T0] NOHZ: local_softirq_pending 08 [ 348.478319][ T3528] tipc: TX() has been purged, node left! 06:17:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xffffffc1, 0x3, 0x2d8, 0x0, 0x2d8, 0x0, 0x0, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c010000f17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6eca96b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564ceeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 348.638365][ T3528] tipc: TX() has been purged, node left! 06:17:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587c0500000000000000010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:16 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e0000000a0001"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 06:17:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'virt_wifi0\x00'}]}, 0x28}}, 0x0) 06:17:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x2a8, 0x2a8, 0x2a8, 0xf8, 0x1d8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xff}}}}, {{@ipv6={@loopback, @dev, [], [], 'geneve0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "a8d4"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@private2, @loopback, [], [0x0, 0x0, 0x0, 0xffffffff], 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) [ 348.716445][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x8980, 0x0) [ 348.788332][ T3528] tipc: TX() has been purged, node left! [ 348.795553][T16005] Cannot find add_set index 0 as target 06:17:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) [ 348.850706][ T28] audit: type=1804 audit(1591942636.936:310): pid=16004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/173/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 348.864016][T16010] Cannot find add_set index 0 as target [ 348.886299][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:17:17 executing program 2: socket$isdn(0x22, 0x3, 0x22) [ 348.968535][ T3528] tipc: TX() has been purged, node left! 06:17:17 executing program 4: r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 06:17:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 349.097357][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.139009][ T3528] tipc: TX() has been purged, node left! 06:17:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 06:17:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) bind(r6, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r7 = socket$kcm(0xa, 0x2, 0x73) bind(r7, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ppoll(&(0x7f0000000580)=[{r0}, {r1, 0x3}, {0xffffffffffffffff, 0xc}, {0xffffffffffffffff, 0xa908}, {r2, 0x481}, {r3, 0x389}, {r5, 0x1000}, {r6, 0x8}, {r7, 0x40}, {r1, 0x2000}], 0xa, &(0x7f0000000600), &(0x7f0000000640)={[0x56]}, 0x8) sendmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="901d1b5f586ba6fa1606bf3fe327f435ee593b492fbd3e2c901fd3cbe9973c3923fc331f2fa63701617a21797457129cec5995ac1a263f3b6e410fbb67f20f39b75169420a0756b9a4756f6e8d01beb269100e338f0c807f462145331ad80d0fa924818d2018ef612ef5fed681bc4bb06f974ed01451e0c266cb6f697e68599167ac9d816518c493ccf391f08b0b0c450d0c815db32a2fc767a1f9fa", 0x9c}, {&(0x7f00000000c0)="9dc0fd92ff16522be15344843647d3765a3fa12d9a93a21e2c42bb152548a765a1d33255bf3d2ab7ea692f7fc125ca8c71a121132abd31fd9d0d255781136793acf99740ad", 0x45}, {&(0x7f0000000340)="f8d9681d38de3e0500d04869fbf91749e3fad96cccde2c79a67a9bd5be8d57825f444e85a7a1983f1da12ceb7e68b0066a663e1795b6a9e8e69a4295e3ed7b449554959faa3d974071e613cb40ceb8f21d0bc75ffc51c900badb", 0x5a}], 0x4, &(0x7f0000000440)=[{0x30, 0x105, 0x200, "6e3da99407a9b7a59fb0042faa6f39bbbd6b61af9947d3e54630d0cb"}, {0xa0, 0x114, 0x1ff, "48c2e7bccf2c06208e7af33025247e59592b43b249dab1034dd3c8a87b881894749dc0ecc1617a3aa22ac0150cf536c9ef17fb10177667fbfca42bef728b6e584491526bd2ceea68e211db4cdeb1be5f2b2e7da748525fe3b0654cb142caf601654a5b4039a6619fccc1f6ed31b3e8f824d3f9dcf700ac392570ad9d279d4e035247bf1f55b323eb5682e549b1069cf2"}], 0xd0}}], 0x1, 0x8004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x100000001) [ 349.308328][ T3528] tipc: TX() has been purged, node left! [ 349.446476][ T28] audit: type=1804 audit(1591942637.526:311): pid=16035 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/174/cgroup.controllers" dev="sda1" ino=16377 res=1 06:17:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4", 0x1e, 0x0, 0x0, 0x0) 06:17:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) 06:17:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 06:17:17 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r0) [ 349.488546][ T3528] tipc: TX() has been purged, node left! 06:17:17 executing program 0: syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x0) 06:17:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) [ 349.638368][ T3528] tipc: TX() has been purged, node left! 06:17:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x8c}}, 0x0) 06:17:17 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 349.788253][ T3528] tipc: TX() has been purged, node left! 06:17:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) 06:17:17 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) [ 349.958399][ T3528] tipc: TX() has been purged, node left! 06:17:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 06:17:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x20) 06:17:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) 06:17:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0xd4957000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xd9}, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)={r4, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xd1, 0x20e, 0x1cf2, 0x7, r4}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000001) 06:17:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001d80)="d083b8778d9e055daedb2fb28df629afabdb0b25311ef1e77295a000a43e2610b846a5a59c06a800d34c3ef145cad9aaddefb439df1beffe701249890b0ea7339ca9794b6cf290548aba931a5059dedce4d27e6263d686d6f1504ecfc3bdccec85c073b5b71f298737ae4c7e96b8d6df30992b9ebb753ddeb1e0dc66f019618e868a38371361d6110edab71f3ae2fc04feed51cd887ac2bdcd241d92f7b1aa9d7f70541143aba6248bd0177732615c9f8a54543062e599a2cee171d811a917a4b0882ba5def07b3260", 0xc9}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:17:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000008c0)="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", 0x15f}, {&(0x7f0000000840)="b5252522629f34a16eef84ce1b0063a44d2793e337dc2c6bb2d88107b89a1516610f2003d59c73b5c7e008a287d2a1d473414b1adeb4ca87742298b064ae974e919c80525175804799682d67fca4", 0x4e}, {0x0}], 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xda6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="1e268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:17:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9", 0x43, 0x11, 0x0, 0x0) 06:17:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:17:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback}}]}, 0x50}}, 0x0) 06:17:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:17:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="01f6ffffff0000007311"], 0xa) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 06:17:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:17:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 351.217776][T16124] x_tables: duplicate underflow at hook 2 [ 351.259924][T16124] x_tables: duplicate underflow at hook 2 06:17:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r0, &(0x7f000000e6c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[{0xf8, 0x0, 0x0, "00597f21f03c004af0319e3063d66723bfbe78505f3d1ee8d742aa6214cbbeb6c4a5824b26f7cdc586cd11ea6d2e8758f1f1fa961e6ed21d16344ab5cf1fcb6de608f112a6fd67f4249060c2f65a0494fd6b7b28ec6e7630f886627a84c407b4149b3f423e6b594ef0fe131dcd95d2f8f1dee69eef8450749e76b71dd93e025558f2dff10ed526f272b448c3e4fa367a375e151a23ef4493bf6ec81a7fb59dae5cb99cc53c24bf5140be452537261fdd9ad65be58f302f74d8cb5edb2a29506b02c6ddb8f5b7f8ef58915128ed485b7439f512838a70c141be2ff49736742adaea"}, {0xf8, 0x0, 0x0, "29c50e95e76523c908ebfe64630aefc0e9fdc17abcbf14884e72cf51a25a38332f1b05a905dad14d917717118f21b5e726d46c3de92ae931eb3e6056f2c63f05cc0afa139b31fc46f3818555798d90e101431714defb2d5927d1ca75dc0cc80da6fc011b11910c67ecaa5a07a456d0173d8ae603fcd78f143e2e78165c344ee9a9615245ed2fc4f0cf13eba1033623752207d87d069450bcddd9548d2455ed8978452dde7379adf2daa8fe12863fb78547a5c869b293dc8e7fa1cb02ee61332efd57f6966268d04323d804c8aabc56089ba93f07a182fc8b3ba05d96d61e42487c"}, {0xe0, 0x0, 0x0, "176bfc7ca7c576bd5380354f432d364cadb00954dd8a72415841bac1ff07adee10949b25ad935e8e7ae987bc8271ec594b376af393928749d8873ed6f6e701be07d6e2c2e9932f45166a3480198d6e68a79b8a6d64299cbb5b914d21d368f268255b5eecf4bfe9a577eb74206d74ec7f79b22abb337f0fe7e33ec49d6d3b5c5664ccdf017490b3fca3ecf54b38428734eea4aea5c27428ee515d165059079762b5671716ea6f7aeae79cd9726e152190a4a960c96f002a6f2aaff66ac16e0bbca944b314e7658b54f0"}, {0x1010, 0x0, 0x0, "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"}, {0x110, 0x0, 0x0, "6f03111c8ef58caf137a7a7213c63967b373c824ee76f1a323d4034543fd0f4649770cb46e0d1268b87f6587280dbf329e3a51dcec87093187aa549cf71a0b2dfd50e659f5009688948defcdc0406352c08cff864c7c97c9179919795b9ccb14a1bef04433d6016df6eb2aefb99a8392f285d0e58d40b72e11cc904ba065d42fb02f65d73b2c3fe8ea7247c4aac8d08b646df0de6c13ec3dc275bd6a6c89589dfeb5156b0d27d16167a895f001edc7851c42797128ba85e6ca1c6051c795f9d9657a6c2de66004ce5bcdb41b8a1c1d7ff0bb6b67b1e8020a931e344230acab1c1f072c1946fe0e48b6437e911eac4bbd52801337c3238ea868"}, {0x40, 0x1, 0x0, "a0b5eabf585b813e6faa8b39fd93b354dac30c9f29d724074b2e814a9f96a4d01fa5a1fccbdb5bdad7"}, {0xbd8, 0x0, 0x0, "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"}], 0x2008}}], 0x2, 0x0) 06:17:19 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 351.401497][ T28] audit: type=1804 audit(1591942639.486:312): pid=16104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/175/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 351.539242][ T28] audit: type=1804 audit(1591942639.506:313): pid=16108 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/175/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 351.622314][ T28] audit: type=1804 audit(1591942639.506:314): pid=16130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/175/cgroup.controllers" dev="sda1" ino=16377 res=1 06:17:19 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 06:17:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000280)=0x2, 0x4) 06:17:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000040657050e9a56378d2400000000000005000100060000000900020073797a30"], 0x28}}, 0x0) 06:17:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind(r1, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff010100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 06:17:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x0) 06:17:20 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffefffffaaaaaaaaaaaa86dd60"], 0x0) 06:17:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 06:17:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x19}}) 06:17:20 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) [ 351.966563][ T28] audit: type=1804 audit(1591942640.046:315): pid=16157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/176/cgroup.controllers" dev="sda1" ino=16225 res=1 06:17:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff85, &(0x7f0000000280)=[{&(0x7f0000000100)="2e00000052008102a00f80854a36b8ab1c9599161a000500030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec0}, 0x0) 06:17:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e73ade7c244ca0009000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) 06:17:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x3000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.stat\x00', 0xb00000000065808, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000001) 06:17:20 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}], 0x20}, 0x400c800) sendmsg$inet(r0, &(0x7f00000026c0)={&(0x7f0000001200)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 06:17:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200000c3, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) 06:17:20 executing program 0: 06:17:20 executing program 1: 06:17:20 executing program 2: r0 = socket(0x18, 0x400000002, 0x0) getsockopt(r0, 0x200000029, 0x3e, 0x0, 0x0) 06:17:20 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @loopback}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="be", 0x1}], 0x1}, 0x60) 06:17:20 executing program 4: r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg(r0, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)="8f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0x170}, 0x0) 06:17:20 executing program 0: syz_emit_ethernet(0xb8, &(0x7f0000000080)={@local, @local, @val, {@ipv6}}, 0x0) 06:17:20 executing program 1: 06:17:20 executing program 2: 06:17:20 executing program 3: 06:17:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000200)={@null, @null}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000180)=0x78) 06:17:21 executing program 1: 06:17:21 executing program 0: 06:17:21 executing program 4: 06:17:21 executing program 2: 06:17:21 executing program 3: 06:17:21 executing program 0: 06:17:21 executing program 2: 06:17:21 executing program 1: 06:17:21 executing program 3: 06:17:21 executing program 4: 06:17:21 executing program 0: [ 353.602660][ T28] audit: type=1804 audit(1591942641.686:316): pid=16218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/178/cgroup.controllers" dev="sda1" ino=16372 res=1 06:17:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010447"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:22 executing program 1: 06:17:22 executing program 3: 06:17:22 executing program 2: 06:17:22 executing program 4: 06:17:22 executing program 0: 06:17:22 executing program 4: 06:17:22 executing program 2: 06:17:22 executing program 1: 06:17:22 executing program 0: 06:17:22 executing program 3: [ 354.150394][ T28] audit: type=1804 audit(1591942642.236:317): pid=16235 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/179/cgroup.controllers" dev="sda1" ino=16145 res=1 06:17:22 executing program 2: 06:17:22 executing program 4: 06:17:22 executing program 0: 06:17:22 executing program 3: 06:17:22 executing program 1: 06:17:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r5}}, 0x20}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000300)={0xa, 0x4e21, 0x7fffffff, @private2={0xfc, 0x2, [], 0x1}, 0x2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001400)=[@tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x31}, r5}}}, @flowinfo={{0x14, 0x29, 0xb, 0x501}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, [], [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x7f}]}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x67, 0x16, [], [@calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x9c, [0x7, 0x1ff]}}, @generic={0x1, 0x2b, "fd2671bb2f0af9a41ff711256d4bb89dcdbfeb22c344e77c90e2ef87750e571e77eef3864137cd6c19624b"}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x58, {0x3, 0x14, 0x7f, 0xff00, [0x9, 0x9, 0x40, 0xb962, 0x7, 0x7db28729, 0x9, 0x1000, 0x100000000, 0x9]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @flowinfo={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x81}}], 0x1a8}, 0x50) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x1, 0x5, 0x9, 0x2d, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bbb, 0x2, {0x6, 0x3c, 0x3, 0x4, 0x0, 0x2, 0x0, @in6=@remote, @in=@multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x7f, 0x0, 0x0, 0x70bd2a, 0x34ff}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@local, 0x1d, 0x0, 0x14}, @sadb_lifetime={0x4, 0x4, 0x1ff, 0x7, 0x8000, 0x9}, @sadb_key={0x17, 0x8, 0x578, 0x0, "e083f37220c5378ab716e2a53d196d32a298b75ea699040683f0576cc403203b7ebda8736385de13728fbbd1eb299d4b28283aa430208f8fec414a8e2d200e9d1df826975c3872fdd29d221b0a0b07a1a2edb86e3afff0a95398328febf85a2edad06a78f3f1eacb26be8719d5ee607ab1d21df12f96c9bc10e641bf6d3fb36576a004a00d3d054df730d794cd4a894135024432d2d425d9f4bf1f0003507f4e703ab49206cc148b83deca2cee73b9"}]}, 0x168}}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) 06:17:22 executing program 3: 06:17:22 executing program 1: 06:17:22 executing program 4: 06:17:22 executing program 2: 06:17:22 executing program 0: [ 354.610323][ T28] audit: type=1804 audit(1591942642.696:318): pid=16251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/180/cgroup.controllers" dev="sda1" ino=16145 res=1 06:17:22 executing program 3: 06:17:22 executing program 1: 06:17:22 executing program 4: 06:17:22 executing program 0: 06:17:22 executing program 2: 06:17:22 executing program 1: 06:17:23 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'veth0_to_team\x00', 0x7}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r0, 0x0, 0x100000001) 06:17:23 executing program 3: 06:17:23 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="060022000000f2"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 06:17:23 executing program 0: 06:17:23 executing program 4: 06:17:23 executing program 1: 06:17:23 executing program 4: 06:17:23 executing program 3: 06:17:23 executing program 0: 06:17:23 executing program 1: 06:17:23 executing program 2: 06:17:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:23 executing program 0: 06:17:23 executing program 4: 06:17:23 executing program 1: 06:17:23 executing program 3: 06:17:23 executing program 2: 06:17:23 executing program 0: 06:17:23 executing program 4: 06:17:23 executing program 3: 06:17:23 executing program 2: [ 355.580630][ T28] audit: type=1804 audit(1591942643.666:319): pid=16293 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/182/cgroup.controllers" dev="sda1" ino=16378 res=1 06:17:23 executing program 1: 06:17:23 executing program 3: 06:17:23 executing program 2: 06:17:23 executing program 0: 06:17:23 executing program 4: 06:17:23 executing program 1: 06:17:23 executing program 3: 06:17:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f00000000c0)=0x7ff) 06:17:24 executing program 2: 06:17:24 executing program 4: 06:17:24 executing program 1: 06:17:24 executing program 0: 06:17:24 executing program 3: 06:17:24 executing program 2: 06:17:24 executing program 0: 06:17:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000400)={0xcdc, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:24 executing program 1: 06:17:24 executing program 3: 06:17:24 executing program 4: 06:17:24 executing program 2: 06:17:24 executing program 0: 06:17:24 executing program 1: 06:17:24 executing program 3: 06:17:24 executing program 4: 06:17:24 executing program 2: 06:17:24 executing program 0: [ 356.505812][ T28] audit: type=1804 audit(1591942644.587:320): pid=16322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/184/cgroup.controllers" dev="sda1" ino=16371 res=1 06:17:24 executing program 1: 06:17:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:25 executing program 3: 06:17:25 executing program 4: 06:17:25 executing program 0: 06:17:25 executing program 2: 06:17:25 executing program 1: 06:17:25 executing program 2: 06:17:25 executing program 1: 06:17:25 executing program 3: 06:17:25 executing program 4: 06:17:25 executing program 0: 06:17:25 executing program 0: 06:17:25 executing program 1: 06:17:25 executing program 3: 06:17:25 executing program 2: 06:17:25 executing program 4: 06:17:25 executing program 3: 06:17:25 executing program 0: 06:17:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'veth0_to_bond\x00', {'ip6gretap0\x00'}, 0x101}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4000000000000009) setsockopt(r3, 0x10e, 0xb, &(0x7f0000f67000)="9adc", 0x2) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xb0b1, 0x4, 0x101, 0x3ff, 0x81]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc041) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x109, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000080) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000280)={@ipv4={[], [], @remote}, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@ipmr_delroute={0x54, 0x19, 0x300, 0x70bd27, 0x25dfdbfd, {0x80, 0x10, 0x90, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1800}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@private2}}, @RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_IIF={0x8, 0x3, r6}, @RTA_DST={0x8, 0x1, @local}, @RTA_DST={0x8, 0x1, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000004}, 0x400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r2, 0x0, 0x100000001) 06:17:25 executing program 4: 06:17:25 executing program 1: 06:17:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:25 executing program 0: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xfd}, 0x5c) write(r0, &(0x7f0000000280)="1c0000001a009b8a29e5f4070000ff00"/28, 0x1c) 06:17:25 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000008280)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000018c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001c40)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x0) 06:17:25 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x2b, 0x0, @local, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 06:17:25 executing program 3: [ 357.632512][T16369] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 357.659760][ T28] audit: type=1804 audit(1591942645.747:321): pid=16363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/186/cgroup.controllers" dev="sda1" ino=16384 res=1 06:17:25 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800004d4e060000000f0000000001000000000075000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000006) [ 357.714277][T16369] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e68001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) [ 357.765557][T16364] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 357.787762][T16372] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) 06:17:25 executing program 4: r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000000240)=""/144, &(0x7f0000000040)=0x90) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'veth0_macvtap\x00', {0x2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x7010, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write(r2, &(0x7f00000000c0)='B', 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x30) [ 357.824762][T16369] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 357.838279][T16369] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 357.982361][T16386] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.994103][ T28] audit: type=1804 audit(1591942646.077:322): pid=16385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820302372/syzkaller.3vxvXS/157/cgroup.controllers" dev="sda1" ino=16373 res=1 06:17:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x16) [ 358.059573][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.119533][ T28] audit: type=1804 audit(1591942646.137:323): pid=16382 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir578156859/syzkaller.mDXB1Z/215/cgroup.controllers" dev="sda1" ino=16381 res=1 06:17:26 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @broadcast}, {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) [ 358.162023][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 358.208320][T16398] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x38e}, 0x0) 06:17:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e90005636b6fd2"], 0x1}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) bind(r4, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)={r6, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x2e}}}, 0x4, 0x0, 0x2, 0x4, 0xffff}, &(0x7f00000000c0)=0x98) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000001) [ 358.489019][T16398] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 358.490904][ T28] audit: type=1804 audit(1591942646.577:324): pid=16385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820302372/syzkaller.3vxvXS/157/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 358.497403][T16395] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:26 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "e3ffffffffffffff", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x3}, 0x0) [ 358.606127][T16408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:17:26 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @random="41cd6850baf2"}}}}, 0x0) [ 358.650935][T16408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.689573][T16408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:17:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz0', "d6ffdefcb4b232b282232e72ea320dcd6e5d1e4b7fc0ad51d7c7cec5ce067c8fa9"}, 0x25) socket$inet6(0xa, 0x0, 0x7) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834f", 0x21, 0x20c49a, 0x0, 0x0) 06:17:27 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/155, 0x9b, 0x0, 0x0, 0x0) [ 358.891614][T16401] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r0, 0xffffe000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358000096407cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) [ 358.951303][T16407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 06:17:27 executing program 4: r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000000240)=""/144, &(0x7f0000000040)=0x90) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'veth0_macvtap\x00', {0x2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x7010, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write(r2, &(0x7f00000000c0)='B', 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x30) 06:17:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03"], 0x6) 06:17:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}}, 0x0) [ 359.333906][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:17:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 359.931031][ T28] audit: type=1800 audit(1591942648.017:325): pid=16438 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16371 res=0 06:17:28 executing program 4: close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0x18, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) 06:17:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}}, 0x0) 06:17:28 executing program 3: select(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)) 06:17:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4) 06:17:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x205, 0x7, 0x1, 0x6, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 360.616986][ T28] audit: type=1804 audit(1591942648.697:326): pid=16491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/190/cgroup.controllers" dev="sda1" ino=16380 res=1 06:17:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) 06:17:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c8010000100013070000000000000000fe880007000008000000000004000001ac1e00010033b20ab401d7782000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d00140073686131"], 0x1c8}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 06:17:29 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x11, 0x0, 0x0, @multicast1, "f37ab016"}}}}}, 0x0) 06:17:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000001020104000000000000000000000000240002801400018008000100ffffffff08000200ac1414aa0c000280050001"], 0x38}}, 0x0) 06:17:31 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xa) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 06:17:31 executing program 0: syz_emit_ethernet(0x2b, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x11, 0x0, 0x0, @multicast1, "f3"}}}}}, 0x0) 06:17:31 executing program 4: 06:17:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x606}, "b54750173d445fc7", "1fcaccc45ac70cf148cc119e81d489d3", "21f10b9d", "71f1cbab72982196"}, 0x28) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x8, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 06:17:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x5411, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 06:17:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d800000018008103e00f80ecdb4cb9040a6965ef0f087c09e87c55a1bc020900b8004099100000000500150005008178a8001600140008c00600026fe48a51f00003ac0414c05c06ad01eb1e634154870fd00fde0000d67f6fa7007134cf6efb8000a007a290457f0189b316277ce06bbace80174c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3089ad809d5e1cace81ed0b7fece0b42a9ecbee5de6", 0xd8}], 0x1}, 0x0) [ 363.240238][T16561] validate_nla: 8 callbacks suppressed [ 363.240248][T16561] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 363.260511][ T28] audit: type=1804 audit(1591942651.347:327): pid=16556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/191/cgroup.controllers" dev="sda1" ino=16370 res=1 06:17:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) [ 363.337077][T16567] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:31 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00fe0000000000000e0000000a00010072"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 363.400320][T16567] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.442377][T16567] IPv6: Can't replace route, no match found 06:17:31 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00fe0000000000000e0000000a000100"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 363.514793][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 06:17:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0xe) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) [ 363.645434][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.659449][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.740288][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.805834][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.830735][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.842398][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.880366][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:32 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xa) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 06:17:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x70}}, 0x0) 06:17:32 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00fe0000000000000e0000000a0001"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 06:17:32 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 364.059600][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000000)) [ 364.136136][T16611] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 364.157621][ T28] audit: type=1804 audit(1591942652.237:328): pid=16602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/192/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 364.184484][T16611] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 364.239604][T16614] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x16, 0x0, 0x0) 06:17:32 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000706010100000000000000000500000705000100070000000900020073797a32000000000900020073797a30000000000900020073797a310000000008000640000000090900020073797a30"], 0x54}}, 0x0) 06:17:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 364.441009][T16624] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 364.472064][T16624] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, "c1fa609e"}]}]}, 0x20}}, 0x0) [ 364.530009][T16628] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) [ 364.677013][ T28] audit: type=1804 audit(1591942652.757:329): pid=16632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/193/cgroup.controllers" dev="sda1" ino=15689 res=1 06:17:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0xc, 0x6, 0x903, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 06:17:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x0, @dev}}) 06:17:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r2], 0x38}}, 0x0) 06:17:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 06:17:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000180)="214df6340966290b3f678e3f2ad36c410f08f61694a7174648833b8cc30afdbdb0333abee4e42fac0e851ca53bf5260cb80b4e62acc0067e73214e491827ed120ba422c93b5939d6078a4f9782d6634d6a42986f2dc92634b603f9b12087b2e0baec5a236f6a14884a8349d64ae12ee0497c45058fe813a2f4053c16dbdfb02ea42782197687c6f6749482bc6f0469666ba3c3d229810f4148b318fc922541", 0x9f) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x17, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x0, 0x0, "0000000000000400"}, 0x22b) [ 365.077500][T16653] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) [ 365.164608][ T28] audit: type=1804 audit(1591942653.247:330): pid=16655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/194/cgroup.controllers" dev="sda1" ino=16371 res=1 06:17:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x8910, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 06:17:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x68}}, 0x0) 06:17:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) socketpair(0x28, 0x5, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r4, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 06:17:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d800000018008114e00f80ecdb4cb9040a6965ef0f087c09e87c55a1bc020900b8004099100000000500150005008178a8001600140008c00600026fe48a51f00003ac0414c05c06ad01eb1e634154870fd00fde0000d67f6fa7007134cf6efb8000a007a290457f0189b316277ce06bbace80174c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3089ad809d5e1cace81ed0b7fece0b42a9ecbee5de6", 0xd8}], 0x1}, 0x0) 06:17:33 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0)=0x80000001, 0x4) 06:17:33 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)) [ 365.557564][T16653] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 365.605337][T16657] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:33 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240003b9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f", 0x73}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d9", 0x5e}], 0x2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x210}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}, {&(0x7f0000000040)="ba3af90a2206548c", 0x8}], 0x2}}], 0x2, 0xc804) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:17:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x275c, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240003b9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000004c0)="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", 0x960}], 0x2}}], 0x1, 0xc804) 06:17:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240003b9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f", 0x73}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d9", 0x5e}], 0x2, &(0x7f0000001540)=ANY=[@ANYBLOB="c00000000000000002010000ff0300006c0219ac763abe89a0819c297c96b4e9465cb508773c19db654549b22f1f022aa737e4243e379ce5d3678a4fa0aef52cdcee6f63587e53afa0195d30beb0658d2b263728fa257aa437c7bdc19188e5c786c59456f52e18bb3e0f7bcd7bd356de5348fa0e8aa89a6e8aa71ea9f9d2258683d16f5bc2b1e42c15002354f4f73a116ce7519f1587d38bb5636d008dd91f9b3888cb41d8d939abbb371a28aae6a12cec4047f6caea905e11381898d7bc000070000000000000001601000000000100991e01cfe51ddd933fb59ed0e73e5d72825a7749b60fa32365b9f026da13543f5c5ba2c2b01a5cabf747b9936b3801bffc3ce6620b55c192a2b164ad585d4f4991a91a3994106cac8a98fa99678b8e454a0f12438bc57344acf5205fad000000e000000000"], 0x210}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0xc804) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 06:17:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x275c, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240003b9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f", 0x73}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d9", 0x5e}], 0x2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x210}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab", 0x55}, {&(0x7f0000000040)="ba3af90a2206548c", 0x8}], 0x2}}], 0x2, 0xc804) 06:17:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:34 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:34 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:34 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0700000000000000fd0700200000000000009c"]}) [ 366.157194][ T28] audit: type=1804 audit(1591942654.237:331): pid=16702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/196/cgroup.controllers" dev="sda1" ino=16373 res=1 06:17:34 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) 06:17:34 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) 06:17:34 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000002800310f00"/20, @ANYRES32, @ANYBLOB="040000000000ffff000000000b0001006367726f7570000034000200300001002c000000090001006d"], 0x64}}, 0x0) 06:17:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400128008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 06:17:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000c37443301f8405070000f0000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="02"], 0x20}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010002508006c0000000000000a000000", @ANYRES32=r8, @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) 06:17:34 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x48) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfe}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 06:17:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xea4b8000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x760}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f96}]}, 0xac}}, 0x0) 06:17:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x5, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0) 06:17:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x2c, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9c4}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) [ 367.066799][T16749] team0: Port device veth19 added 06:17:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) recvmmsg(r4, &(0x7f0000002240)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000001400)=""/186, 0xba}, {&(0x7f00000014c0)=""/192, 0xc0}], 0x5}, 0x2}, {{&(0x7f0000001600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001680)=""/231, 0xe7}, {&(0x7f0000001780)=""/217, 0xd9}], 0x2, &(0x7f0000001880)=""/106, 0x6a}, 0xff}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)=""/132, 0x84}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/252, 0xfc}, {&(0x7f0000001b40)=""/233, 0xe9}, {&(0x7f0000001c40)=""/216, 0xd8}, {&(0x7f0000001d40)=""/1, 0x1}], 0x7, &(0x7f0000001e00)=""/78, 0x4e}, 0x5}, {{&(0x7f0000001e80)=@ipx, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f00)=""/231, 0xe7}, {&(0x7f0000002000)=""/243, 0xf3}, {&(0x7f0000002100)=""/135, 0x87}], 0x3, &(0x7f0000002200)=""/11, 0xb}, 0x80000001}], 0x4, 0x40, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000002340)={0x7fffffff, 0x2, 0x3, 0x0, 0x0, [{{r0}, 0x5c31}, {{r6}, 0x8b}, {{r7}, 0x20a1}]}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r1, 0x0, 0x100000001) 06:17:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 06:17:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf0ffff}]}, 0x28}}, 0x0) [ 367.569352][ T28] audit: type=1804 audit(1591942655.657:332): pid=16803 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/198/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 367.723642][T16749] team0: Port device veth19 removed [ 367.816855][T16757] team0: Port device veth19 added 06:17:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 368.303031][T16823] validate_nla: 7 callbacks suppressed [ 368.303039][T16823] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 368.325505][T16827] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400128008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 06:17:36 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYBLOB="176a2334ab134a01d50c76e311232f54ac86a95c54376afb1091c4b86f8f5d7f33e703c6c60e1605beb4e9ed0197863f849e3ba7ca501c77cdae7aee9589614c348ab1dc32c57832644b14d5ae63c67cdaefb870cf22f6c6aa2658676244a2042a52c0af", @ANYRESDEC], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 06:17:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xfffd}, 0x8) 06:17:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 06:17:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 368.502858][T16843] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 368.546737][T16848] __nla_validate_parse: 12 callbacks suppressed [ 368.546747][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 06:17:36 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f0000000180)=0xfffffffffffffe0e) 06:17:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x2}, {0x8}}}}}]}, 0x40}}, 0x0) [ 368.705191][T16843] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) [ 368.852685][T16849] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000002a00310f00"/20, @ANYRES32, @ANYBLOB="040000000000ffff"], 0x64}}, 0x0) 06:17:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x200, 0x4) 06:17:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) [ 369.119992][T16901] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 369.162687][T16901] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 369.180739][T16906] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:37 executing program 1: 06:17:37 executing program 0: 06:17:37 executing program 3: 06:17:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:37 executing program 4: 06:17:37 executing program 0: [ 369.451931][T16915] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 369.503697][T16915] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:17:37 executing program 4: 06:17:37 executing program 1: 06:17:37 executing program 3: 06:17:37 executing program 0: 06:17:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:37 executing program 3: 06:17:37 executing program 1: 06:17:37 executing program 4: 06:17:37 executing program 0: 06:17:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:37 executing program 3: 06:17:38 executing program 1: 06:17:38 executing program 4: 06:17:38 executing program 3: 06:17:38 executing program 0: 06:17:38 executing program 1: 06:17:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:38 executing program 4: 06:17:38 executing program 0: 06:17:38 executing program 3: 06:17:38 executing program 4: 06:17:38 executing program 0: 06:17:38 executing program 1: 06:17:38 executing program 3: 06:17:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:38 executing program 4: 06:17:38 executing program 0: 06:17:38 executing program 1: 06:17:38 executing program 3: 06:17:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:38 executing program 1: 06:17:38 executing program 0: 06:17:38 executing program 4: 06:17:38 executing program 3: 06:17:38 executing program 1: 06:17:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:38 executing program 4: 06:17:38 executing program 0: 06:17:39 executing program 3: 06:17:39 executing program 0: 06:17:39 executing program 4: 06:17:39 executing program 1: 06:17:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:39 executing program 3: 06:17:39 executing program 0: 06:17:39 executing program 4: 06:17:39 executing program 1: 06:17:39 executing program 0: 06:17:39 executing program 3: 06:17:39 executing program 4: 06:17:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:39 executing program 1: 06:17:39 executing program 3: 06:17:39 executing program 0: 06:17:39 executing program 4: 06:17:39 executing program 1: 06:17:39 executing program 4: 06:17:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 06:17:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) 06:17:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21020000000000000000010000000c0099002100000002000000080001"], 0x28}}, 0x0) 06:17:39 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd601fb31600442f00fc000000000000000000000000000000000000000000000000000000000000080001"], 0x0) 06:17:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) recvmmsg(r4, &(0x7f0000002240)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000001400)=""/186, 0xba}, {&(0x7f00000014c0)=""/192, 0xc0}], 0x5}, 0x2}, {{&(0x7f0000001600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001680)=""/231, 0xe7}, {&(0x7f0000001780)=""/217, 0xd9}], 0x2, &(0x7f0000001880)=""/106, 0x6a}, 0xff}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)=""/132, 0x84}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/252, 0xfc}, {&(0x7f0000001b40)=""/233, 0xe9}, {&(0x7f0000001c40)=""/216, 0xd8}, {&(0x7f0000001d40)=""/1, 0x1}], 0x7, &(0x7f0000001e00)=""/78, 0x4e}, 0x5}, {{&(0x7f0000001e80)=@ipx, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f00)=""/231, 0xe7}, {&(0x7f0000002000)=""/243, 0xf3}, {&(0x7f0000002100)=""/135, 0x87}], 0x3, &(0x7f0000002200)=""/11, 0xb}, 0x80000001}], 0x4, 0x40, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000002340)={0x7fffffff, 0x2, 0x3, 0x0, 0x0, [{{r0}, 0x5c31}, {{r6}, 0x8b}, {{r7}, 0x20a1}]}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r1, 0x0, 0x100000001) 06:17:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:17:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:40 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:40 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:40 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 372.095615][T17024] IPVS: ftp: loaded support on port[0] = 21 [ 372.231751][ T28] audit: type=1804 audit(1591942660.318:333): pid=17016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir578156859/syzkaller.mDXB1Z/248/cgroup.controllers" dev="sda1" ino=16262 res=1 06:17:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x81, @ipv4={[], [], @empty}, 0x80}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}], 0x98) 06:17:40 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 372.429969][T17049] IPVS: ftp: loaded support on port[0] = 21 06:17:40 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r9}}, 0x20}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="47ff69873831c9d86e9b88369b41c25ff393eaa0fbaabdb5bc", 0x19}, {&(0x7f0000000180)="a297ade96d0b353c6b49a25c8d8a7213a1ee5fada4f0b36c110c97fc70872060f5e71d91e4612640d22e667ce362cf1e78d5d8ac65c287fc66d0d89784c4552e6e67b3020b9ef1d0db4d640ed079b7db5188968c02535a831687722caef3482470ed8012649fabf64968478dbe8d29c78b8e571f89d124025c2d72d5ddb27a281c308186f44b8df2a7962ac07e5a18fe8ec639faef74846f7e71b8f8dd4097ec547a09c74aea83896d8cb90944348c45acde64ba19a3008bcddc906d3c452e67c4bec8ddf1c6b5bdcdf2456e265ebf3025c3f4590c93e6fc65c322", 0xdb}, {&(0x7f0000000280)="5fba5f075d71f6391f37e5e4358069b813b6a72a31fbab1bbf8bbd79926393aae4d739908e0fd186e1b4261511d2563586319b586067189a592a5d9057b496dad3b8ab58242515fa43eb8d7aa0d1a121867992ae64848d9d3eacd043732cbf7254fc76017f9e78614006e73e7d31fb647819dd2f005b0a5dbec7baee930be2208226f1f977286b1af5f2c68affa464f83fb24e62353e8ad6767b29f4e5257456ec3cbf96cf", 0xa5}], 0x3, &(0x7f0000000400)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x5c, 0x1, [], [@enc_lim={0x4, 0x1, 0xe2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts={{0x1100, 0x29, 0x37, {0x73, 0x21c, [], [@padn={0x1, 0x1, [0x0]}, @generic={0xf1, 0xd8, "b668b83b2ae40abc7f9a9950b7f351d37c0ad08c182a3febc1990e3a791f51ce64a6afbf10ff3c2be2522945b72dfaa9613cbffaad9959423fc9f17856bf17a27db58a3b882f889454cb21a18cd566431a7315fe902e3da82cd806502dde30227f13bdf31a835b014ff0d29c996f4937e5cdc2850b27c7024c07092aefa4b27982ed1e9eceaf4214abae98578783c8ab83f72577dd991be2c847a8ef3d3960723262023cb0a5f33918eb401ab18b196e663f9a2a105d4a20965534231551a61c191f8706fe5e87702b8559349a6bf41aa0b11749aa8f71c8"}, @generic={0xa2, 0x1000, "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"}, @pad1]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2f, 0x4, [], [@ra={0x5, 0x2, 0x4000}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2e}}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x1, 0x0, [@private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x87, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @local}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xc0000}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2f, 0x5, [], [@enc_lim={0x4, 0x1, 0x20}, @pad1, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x8d}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x16, 0xb, [], [@enc_lim={0x4, 0x1, 0x3f}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x0, 0xe, 0x54, 0x3, [0x3f, 0x7, 0x2, 0xe1, 0x763196ca, 0x0, 0x81]}}]}}}], 0x12d0}, 0x20004090) 06:17:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 373.171366][ T28] audit: type=1804 audit(1591942661.258:334): pid=17083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir578156859/syzkaller.mDXB1Z/249/cgroup.controllers" dev="sda1" ino=15794 res=1 [ 373.313851][T17086] bridge3: port 1(bond0) entered blocking state [ 373.340954][T17086] bridge3: port 1(bond0) entered disabled state 06:17:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 373.368134][ T3528] tipc: TX() has been purged, node left! [ 373.372983][T17086] device bond0 entered promiscuous mode [ 373.404733][T17086] device bond_slave_0 entered promiscuous mode [ 373.452758][T17086] device bond_slave_1 entered promiscuous mode [ 373.515334][T17094] device bond0 left promiscuous mode [ 373.521322][T17094] device bond_slave_0 left promiscuous mode [ 373.568053][T17094] device bond_slave_1 left promiscuous mode 06:17:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffffff0) [ 373.594168][T17094] bridge3: port 1(bond0) entered disabled state 06:17:41 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 373.918788][ T28] audit: type=1804 audit(1591942662.008:335): pid=17101 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir065293558/syzkaller.Ugpqcb/228/cgroup.controllers" dev="sda1" ino=15873 res=1 06:17:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffff000) 06:17:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 374.337838][ T28] audit: type=1804 audit(1591942662.428:336): pid=17115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir973203008/syzkaller.nMI7ej/230/cgroup.controllers" dev="sda1" ino=16001 res=1 06:17:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:42 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000300)={{0x2, 0x2, @multicast2}, {0x0, @local}, 0xc, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'vlan1\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan1\x00'}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x637e}) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockname$netlink(r5, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x1, 0x9, 0xf1a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x2}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x28, &(0x7f0000000240)}, 0x10) syz_emit_ethernet(0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r6], 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/662, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x39d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:17:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 1 (fault-call:10 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:43 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 375.488178][T17161] FAULT_INJECTION: forcing a failure. [ 375.488178][T17161] name failslab, interval 1, probability 0, space 0, times 0 [ 375.550252][T17161] CPU: 0 PID: 17161 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 375.558615][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.568678][T17161] Call Trace: [ 375.571991][T17161] dump_stack+0x188/0x20d [ 375.576348][T17161] should_fail.cold+0x5/0xa [ 375.580875][T17161] ? fault_create_debugfs_attr+0x140/0x140 [ 375.586707][T17161] should_failslab+0x5/0xf [ 375.591149][T17161] kmem_cache_alloc_node+0x25c/0x760 [ 375.596547][T17161] ? __sk_dst_check+0x139/0x2d0 [ 375.601467][T17161] __alloc_skb+0xba/0x5a0 [ 375.605965][T17161] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 375.611619][T17161] ? tcp_write_queue_purge+0x656/0x15a0 [ 375.617220][T17161] ? __tcp_md5_do_lookup+0x298/0x6b0 [ 375.622526][T17161] sk_stream_alloc_skb+0x106/0xc70 [ 375.627652][T17161] tcp_connect+0xfb3/0x42b0 [ 375.632286][T17161] ? tcp_fastopen_defer_connect+0x11b/0x3f0 [ 375.638195][T17161] ? __tcp_transmit_skb+0x3770/0x3770 [ 375.643705][T17161] ? siphash_1u64+0x13/0x260 [ 375.648834][T17161] ? secure_ipv6_port_ephemeral+0x250/0x250 [ 375.654812][T17161] ? xfrm_lookup_route+0x65/0x1e0 [ 375.659941][T17161] ? dst_release+0xd/0xe0 [ 375.664286][T17161] ? prandom_u32_state+0xe/0x170 [ 375.669245][T17161] tcp_v4_connect+0x14f0/0x1c10 [ 375.674123][T17161] ? tcp_v4_md5_lookup+0x240/0x240 [ 375.679281][T17161] __inet_stream_connect+0x80f/0xe30 [ 375.684581][T17161] ? lock_release+0x800/0x800 [ 375.689266][T17161] ? lock_downgrade+0x840/0x840 [ 375.694132][T17161] ? ipv4_mib_init_net+0x570/0x570 [ 375.699257][T17161] ? mark_held_locks+0x9f/0xe0 [ 375.704098][T17161] ? __local_bh_enable_ip+0x159/0x270 [ 375.709484][T17161] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 375.715492][T17161] ? lock_sock_nested+0x94/0x110 [ 375.720474][T17161] ? lock_sock_nested+0x94/0x110 [ 375.725433][T17161] inet_stream_connect+0x53/0xa0 [ 375.730382][T17161] ? __inet_stream_connect+0xe30/0xe30 [ 375.735885][T17161] __sys_connect_file+0x155/0x1a0 [ 375.740954][T17161] __sys_connect+0x160/0x190 [ 375.745559][T17161] ? __sys_connect_file+0x1a0/0x1a0 [ 375.751298][T17161] ? __this_cpu_preempt_check+0x28/0x190 [ 375.756947][T17161] ? fput_many+0x2f/0x1a0 [ 375.761294][T17161] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 375.766762][T17161] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 375.772753][T17161] ? do_syscall_64+0x21/0x7d0 [ 375.777485][T17161] __x64_sys_connect+0x6f/0xb0 [ 375.782295][T17161] do_syscall_64+0xf6/0x7d0 [ 375.786907][T17161] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 375.792814][T17161] RIP: 0033:0x45ca69 [ 375.796723][T17161] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.816341][T17161] RSP: 002b:00007f5391805c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 375.824757][T17161] RAX: ffffffffffffffda RBX: 00000000004db400 RCX: 000000000045ca69 [ 375.832737][T17161] RDX: 000000000000002f RSI: 0000000020000140 RDI: 0000000000000005 [ 375.840714][T17161] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 375.848693][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 375.856788][T17161] R13: 0000000000000088 R14: 00000000004c3469 R15: 00007f53918066d4 06:17:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:44 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:44 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x46c, 0x3f4, 0x4, 0x70bd26, 0x25dfdbfc, {0x3, 0x0, 0x2, [0x38dd, 0x39d, 0x5, 0x1f, 0x2, 0x1, 0x2, 0x0, 0xffffc4a0, 0x9, 0xd2, 0x4, 0x5f26, 0x20, 0x80000000, 0x9, 0x990, 0x8, 0x6, 0xfffffffa, 0x42, 0xdb87, 0x8, 0x2, 0x3, 0x80000000, 0x400, 0x7fffffff, 0x5f5, 0x60, 0x8, 0x1, 0xb9, 0x7, 0x7, 0x8cf0, 0x4, 0x6da, 0x7, 0x80, 0x80000000, 0x6, 0x401, 0xa1e, 0xdbc9, 0xa352, 0x6, 0x7, 0x1, 0x5, 0x80, 0x0, 0x9, 0x6, 0x8001, 0x2, 0xec, 0x10001, 0xffffffff, 0x101, 0x80000001, 0x4, 0x5, 0x4], [0x5, 0xfffffffc, 0x7fffffff, 0x2, 0x7f, 0x2, 0x7, 0xda, 0x3, 0x6, 0x4, 0xfffffffd, 0x4, 0xedfe, 0x5, 0xdc, 0xfffffc00, 0x2, 0x1, 0x2, 0x0, 0x3, 0x10000, 0x0, 0xff, 0xdd, 0xffffffc1, 0x72, 0x7, 0x303, 0x3, 0x3, 0x5, 0x2, 0x3ff, 0x7, 0x10001, 0x8, 0x3ff, 0xffffffa5, 0x2, 0x1f, 0x3, 0x1, 0x303ba3fe, 0x6, 0xfb41, 0xffffffe1, 0x8, 0x80, 0x80000001, 0x80, 0xbc, 0x8000, 0x0, 0x7f, 0x9, 0x0, 0x20, 0xffffffff, 0x7fffffff, 0x1, 0xffff, 0x101], [0x8, 0x1000, 0x401, 0x0, 0x745, 0x80, 0x81, 0xffffffff, 0x4, 0xd1, 0x4, 0x200, 0x5, 0x2, 0xe290, 0x2, 0x7f, 0x18e, 0x9c59, 0x7, 0x8000, 0x800, 0x0, 0x0, 0x9, 0x9, 0x80000001, 0x2, 0x400, 0x0, 0xc0, 0x6, 0x3ff, 0x10001, 0x4, 0x100, 0x9, 0x5, 0x7ff, 0x0, 0x8, 0x10001, 0x7, 0x93f2, 0x3, 0x4, 0x10001, 0xffffffca, 0x1, 0x400, 0x8, 0xffffffff, 0x1ff, 0xfffffff8, 0x9, 0x2, 0x5, 0xff, 0xe361, 0x2, 0x0, 0x3, 0xce, 0x1], [0x566, 0x8, 0x40, 0x2, 0x5, 0xfffffffe, 0x9, 0x8b, 0x7, 0x7, 0xde, 0x54c4000, 0x9, 0x6, 0x635, 0x6, 0xc46, 0x7, 0x9, 0x7ffffffd, 0x4d9a5f7b, 0x7f, 0x1, 0x834, 0x1, 0x3, 0x100, 0x6, 0x2, 0x0, 0x8, 0x4, 0xfffffc00, 0x3, 0x5, 0x480, 0x401, 0x6, 0x1f, 0x1f, 0x1ff, 0x0, 0xe7, 0x7f, 0x2, 0x800, 0x5, 0x42, 0x80000001, 0x8, 0x1, 0x2f, 0x0, 0x0, 0xee, 0x7, 0x5, 0x8, 0x60, 0xe8, 0x7, 0x4, 0x2, 0x9], 0x4c, ['\x00', ']+--\xe5\x00', '-\\:{}\x00', '$-\x90\x00', ']\\[\x00', '\'\'\x00', 'cgroup.controllers\x00', 'cgroup.controllers\x00', '+}^K:$#--,\x00', '),\x00']}, ["", ""]}, 0x46c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000180)={0x59, 0x9, 0x8, 0xa, 0xe10, 0xc1}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000001c0)={{0x2, 0x0, @reserved="991fd73adfdbcbe843d4c7a45127bd6db8960c6a6d6bda511cf1a33681a543b7"}, 0x1c, 0x0, [], "bc949563061b9e2a744e4055cb082d3d1f535fc5a724aec8194ef8b0"}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000002c1d61eb9a4c2638cf08cbe249de27596d1a9316783eb2b74b887bfa8859036852000000", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000d2bcf2be17ee1944eb9d2db9f2c12c3afd941d7e520e924b8e10efc09319cc7e6dd1223aa9940a5e005949711cbfa9799ab910d4320932d3210360700da07275556ea8852bb2623aec7b4b58099b"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000940), &(0x7f0000000980)=0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x5, 0x1, 0x13d708ad8e98d257, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", ""]}, 0x14}}, 0x20004010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r1, 0x0, 0x100000001) 06:17:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 377.050449][T17197] FAULT_INJECTION: forcing a failure. [ 377.050449][T17197] name failslab, interval 1, probability 0, space 0, times 0 [ 377.114724][T17197] CPU: 0 PID: 17197 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 377.123106][T17197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.133175][T17197] Call Trace: [ 377.136525][T17197] dump_stack+0x188/0x20d [ 377.140907][T17197] should_fail.cold+0x5/0xa [ 377.145428][T17197] ? fault_create_debugfs_attr+0x140/0x140 [ 377.151251][T17197] ? mark_lock+0x11f/0xdd0 [ 377.155709][T17197] should_failslab+0x5/0xf [ 377.160130][T17197] __kmalloc_track_caller+0x2d1/0x7a0 [ 377.165628][T17197] ? __sctp_setsockopt_connectx+0x42/0x180 [ 377.171453][T17197] ? mark_held_locks+0x9f/0xe0 [ 377.176296][T17197] memdup_user+0x22/0xd0 [ 377.180555][T17197] __sctp_setsockopt_connectx+0x42/0x180 [ 377.186203][T17197] sctp_setsockopt+0x15a1/0x7090 [ 377.191161][T17197] ? sctp_setsockopt_bindx+0xb0/0xb0 [ 377.196462][T17197] ? aa_label_sk_perm+0x89/0xe0 [ 377.201331][T17197] ? aa_sk_perm+0x319/0xab0 [ 377.205878][T17197] ? ksys_dup3+0x3c0/0x3c0 [ 377.210305][T17197] ? aa_af_perm+0x260/0x260 [ 377.214828][T17197] __sys_setsockopt+0x248/0x480 [ 377.219688][T17197] ? __sock_recv_ts_and_drops+0x430/0x430 [ 377.225500][T17197] ? __sb_end_write+0x101/0x1d0 [ 377.230361][T17197] ? fput_many+0x2f/0x1a0 [ 377.234712][T17197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 377.240182][T17197] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 377.246180][T17197] __x64_sys_setsockopt+0xba/0x150 [ 377.251306][T17197] do_syscall_64+0xf6/0x7d0 [ 377.255831][T17197] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 377.261725][T17197] RIP: 0033:0x45ca69 [ 377.265661][T17197] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.285274][T17197] RSP: 002b:00007fce13f7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.293785][T17197] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 377.301768][T17197] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 06:17:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x3578, 0x4) [ 377.309747][T17197] RBP: 000000000078bf00 R08: 0000000000000010 R09: 0000000000000000 [ 377.317732][T17197] R10: 0000000020961fe4 R11: 0000000000000246 R12: 0000000000000004 [ 377.325709][T17197] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007fce13f7b6d4 06:17:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:45 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 377.593324][ T28] audit: type=1804 audit(1591942665.678:337): pid=17212 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/200/cgroup.controllers" dev="sda1" ino=15826 res=1 [ 377.657221][T17219] FAULT_INJECTION: forcing a failure. [ 377.657221][T17219] name failslab, interval 1, probability 0, space 0, times 0 [ 377.670362][T17219] CPU: 1 PID: 17219 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 377.678695][T17219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.688756][T17219] Call Trace: [ 377.692057][T17219] dump_stack+0x188/0x20d [ 377.696406][T17219] should_fail.cold+0x5/0xa [ 377.700945][T17219] ? fault_create_debugfs_attr+0x140/0x140 [ 377.706770][T17219] ? lock_release+0x800/0x800 [ 377.711580][T17219] should_failslab+0x5/0xf [ 377.716007][T17219] kmem_cache_alloc+0x44/0x740 [ 377.720789][T17219] ? inet_get_local_port_range+0x24f/0x3d0 [ 377.726616][T17219] sctp_get_port_local+0x3f7/0x14c0 [ 377.731835][T17219] ? sctp_set_owner_w+0x4c0/0x4c0 [ 377.736983][T17219] ? __ipv6_addr_type+0x20d/0x32a [ 377.742027][T17219] ? sctp_bind_addr_match+0x1d5/0x2c0 [ 377.747413][T17219] sctp_do_bind+0x208/0x5c0 [ 377.751926][T17219] ? memset+0x20/0x40 [ 377.755946][T17219] sctp_autobind+0x168/0x1e0 [ 377.760549][T17219] ? sctp_do_bind+0x5c0/0x5c0 [ 377.765251][T17219] sctp_connect_new_asoc+0x436/0x580 [ 377.770553][T17219] __sctp_connect+0x430/0xc70 [ 377.775256][T17219] ? sctp_connect_new_asoc+0x580/0x580 [ 377.780786][T17219] ? __might_fault+0x190/0x1d0 [ 377.785552][T17219] ? _copy_from_user+0x13c/0x1a0 [ 377.790588][T17219] ? security_sctp_bind_connect+0x8e/0xc0 [ 377.796322][T17219] __sctp_setsockopt_connectx+0x12d/0x180 [ 377.802048][T17219] sctp_setsockopt+0x15a1/0x7090 [ 377.806999][T17219] ? sctp_setsockopt_bindx+0xb0/0xb0 [ 377.812294][T17219] ? aa_label_sk_perm+0x89/0xe0 [ 377.817160][T17219] ? aa_sk_perm+0x319/0xab0 [ 377.821670][T17219] ? ksys_dup3+0x3c0/0x3c0 [ 377.826091][T17219] ? aa_af_perm+0x260/0x260 [ 377.830600][T17219] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 377.836600][T17219] __sys_setsockopt+0x248/0x480 [ 377.841469][T17219] ? __sock_recv_ts_and_drops+0x430/0x430 [ 377.847286][T17219] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 377.852847][T17219] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 377.858836][T17219] ? __sched_text_start+0x8/0x8 [ 377.863696][T17219] ? fput_many+0x2f/0x1a0 [ 377.868039][T17219] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 377.873502][T17219] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 377.879495][T17219] __x64_sys_setsockopt+0xba/0x150 [ 377.884616][T17219] do_syscall_64+0xf6/0x7d0 [ 377.889136][T17219] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 377.895032][T17219] RIP: 0033:0x45ca69 06:17:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 377.898938][T17219] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.918673][T17219] RSP: 002b:00007fce13f7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.927121][T17219] RAX: ffffffffffffffda RBX: 00000000005053c0 RCX: 000000000045ca69 [ 377.935099][T17219] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 377.943102][T17219] RBP: 000000000078bf00 R08: 0000000000000010 R09: 0000000000000000 06:17:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x3, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 377.951084][T17219] R10: 0000000020961fe4 R11: 0000000000000246 R12: 0000000000000004 [ 377.959064][T17219] R13: 0000000000000b07 R14: 00000000004d7938 R15: 00007fce13f7b6d4 06:17:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x4, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xfdef) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e90005000100472b6a7db863c8830f9909000000000000caf598e7abebcf2e"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 06:17:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x5, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000706010358d43a83587cff000100e90005f50000474c38c0514f00becab049c4ac46b1c86883c425d90f794fde02a51b8e68ff7b84209bb80e0f72083ada81e3641708dc6c168a75488b861b6bd6a0664d4007d5c9280d29e5fb15009a82488da178e31cc6903c09b464311fc03a68eec13c9b7d6890f7451d2e6930c702b3e1819293"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 378.842611][ T28] audit: type=1804 audit(1591942666.928:338): pid=17259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/202/cgroup.controllers" dev="sda1" ino=16373 res=1 06:17:47 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x6, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x7, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x2, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x8, 0x4e23, @loopback}, 0x2f) 06:17:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendfile(r2, r1, 0x0, 0x100000001) [ 379.776420][ T3528] tipc: TX() has been purged, node left! 06:17:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x9, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x3, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000114000/0x1000)=nil, 0x1000, 0x2, 0x8010, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0xa, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x4, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x5, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 380.780048][ T28] audit: type=1804 audit(1591942668.868:339): pid=17320 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/204/cgroup.controllers" dev="sda1" ino=16366 res=1 06:17:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0xc, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 380.854759][ T28] audit: type=1804 audit(1591942668.918:340): pid=17323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/204/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 380.982729][ T28] audit: type=1800 audit(1591942668.968:341): pid=17318 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16366 res=0 [ 381.072801][ T28] audit: type=1800 audit(1591942668.968:342): pid=17323 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=16366 res=0 06:17:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x10, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:49 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x63, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x8, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 381.471454][ T28] audit: type=1804 audit(1591942669.558:343): pid=17367 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/205/cgroup.controllers" dev="sda1" ino=16368 res=1 06:17:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x240, 0x4e23, @loopback}, 0x2f) 06:17:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x9, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0xa, @loopback}, 0x2f) 06:17:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xa, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair(0x2, 0x80000, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ecb(camellia),md5)\x00'}, 0x58) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)={r4, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r4, 0x400}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000080000706010358d43a83587cfffaff40007fffffff0047"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) 06:17:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 382.358507][ T28] audit: type=1804 audit(1591942670.448:344): pid=17403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/207/cgroup.controllers" dev="sda1" ino=16381 res=1 06:17:50 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xb, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xc, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x63, @loopback}, 0x2f) [ 382.998439][ T28] audit: type=1804 audit(1591942671.088:345): pid=17421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/208/cgroup.controllers" dev="sda1" ino=16383 res=1 06:17:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xd, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000429000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffeef, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007060103580f07c6307cff000102e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0x100000001) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf250400000008000100db81494008000100020000000800010002653400"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 06:17:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x10, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x11, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000002}, 0x2f) 06:17:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x12, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 384.703531][ T28] audit: type=1804 audit(1591942672.778:346): pid=17456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/209/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 384.801938][ T28] audit: type=1804 audit(1591942672.778:347): pid=17462 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/209/cgroup.controllers" dev="sda1" ino=16384 res=1 06:17:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = socket$kcm(0xa, 0x2, 0x73) bind(r2, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYRES32, @ANYBLOB="a0dd8f5f42015fc07824e809e0f29091875a187f9756a5288b492811f0524c9146869953889b23edaddfa439a5ad85595c4c01c6864b35c687f33bcda119a20d3965d0739f45b6e85b24a627"], 0x1}}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) 06:17:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 384.911860][ T28] audit: type=1804 audit(1591942672.988:348): pid=17481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/209/cgroup.controllers" dev="sda1" ino=16384 res=1 06:17:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x13, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100), 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000003}, 0x2f) 06:17:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x14, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100), 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 385.191608][ T28] audit: type=1804 audit(1591942673.268:349): pid=17498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/210/cgroup.controllers" dev="sda1" ino=16372 res=1 06:17:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100), 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x15, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x16, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000440)=@tipc, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000006c0)=""/133, 0x85}], 0x5}}, {{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/90, 0x5a}, {&(0x7f0000001a00)=""/38, 0x26}, {&(0x7f0000001a40)=""/114, 0x72}, {&(0x7f0000001ac0)=""/128, 0x80}], 0x6, &(0x7f0000001bc0)=""/77, 0x4d}, 0xbb9}, {{&(0x7f0000001c40)=@generic, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001cc0)=""/158, 0x9e}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x2}, 0x11}], 0x3, 0x2100, &(0x7f0000002ec0)={r3, r4+60000000}) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000800000000058d400010047"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f00000000c0)={'veth1_to_batadv\x00', {0x2, 0x4e22, @private=0xa010101}}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x154, 0x1, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_EXP={0x114, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0xe8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={[], [], @loopback}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2700}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x99}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7fff}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x82}, 0x20000040) 06:17:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000004}, 0x2f) 06:17:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x17, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 386.104593][ T28] audit: type=1804 audit(1591942674.178:350): pid=17535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/211/cgroup.controllers" dev="sda1" ino=16366 res=1 06:17:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x18, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x19, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000005}, 0x2f) 06:17:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffe2a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40)={r3}, 0xc) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0xc) mmap(&(0x7f00000e9000/0x3000)=nil, 0x3000, 0x1000001, 0x50, r4, 0xe251a000) sendfile(r2, r1, 0x0, 0x100000001) 06:17:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x21, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 387.198226][ T28] audit: type=1804 audit(1591942675.278:351): pid=17581 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/212/cgroup.controllers" dev="sda1" ino=16369 res=1 06:17:55 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100), 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x22, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000006}, 0x2f) 06:17:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) bind(r2, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000001) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="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", 0x91f}, {&(0x7f0000000300)="ba9adb8d19ac38323dbfb9bbe352e1dd00ebf245e1206e251060084d9e84b1b8ac619ee05cb0", 0x26}], 0x2, &(0x7f0000000400)=[@iv={0x100, 0x117, 0x2, 0xeb, "56429abc9688c3919ce4c21ed0561b59422aa33bf67326e70997fea26f22a6fbd0d5e6e54b8f558cfd94056a91ad9d2064cee2fc02b64a4b0717bf10b3d83baf8640bf792aea2b917cb7073968129d734174193f24b51364eb4be2b700bf6d924c0bf5dffafaf9eb1d349e5f6a7b07232e6a217416c2cca71f02d69e515239f9b84ba1f36b6b30204ad2ceb7e8b41ab18092b70d595cb20d70d9bc6c464a1a82271d86c0eb2e320e4e3d4e0c31e6b5802b845e6ed6f31030463c73a449dfd5eaf006234cf7958bc1ae2a166ba36e692cbca2503ec362d48cc5f2bf37c7ef9563eae352f07e3287219ebc0e"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x118, 0x4000811}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="e3443cb30d9c68e2c058b482c5b346b31f", 0x11}, {&(0x7f0000000540)="b378bd2edfca9220fa27bca86ed1e50492819eac35c5af17055aebbbc3ff42aa66fe51b4f30f7fbd4526463b3ee680f8cfca86f8d642cf942b5f1e5c672c8c359a3c293600de0f17ff534a046cfc407765dd22c942183c7902e6ee7733be8d2ad2cef0097caedbadb4a318be7f82d0f81cedc8c383c7dfe147519f69de65205b582cd2813dd34a187e95b4b795fe05a9c47fbf59f5c07ef5caf91375cc3342d198a0b66de26f3ab3440c0c3e3bd878a2a028f7d87029d1a34abfd468d43df7646b25f47754e61cbbaf204b1f72e5a7ea1fb3761131c3f2ff5564ca54460787bfdc5a3a667b27fce5425d76", 0xeb}, {&(0x7f0000000640)="c3102039da09ae77e537f23fd7b53e66d31a96a0fef7cc9c9319a6ed22239998a6bba331b7dc9f559e221e834e77424a5effb0cbb3dc6bef81936ae738eca7b64524cbd5246215fc5d1e42f7def29ddcc7dda977824ebc982e25d6c51bb5e42abe28195d5bfa8c1c375142a38e417892e44a0f637f92ebe8140c4ee9cb3906884b8abed83982b7", 0x87}, {&(0x7f0000000700)="7c979f1a74c9cdd80fdcfd7b9cbe76662206caca540af69d135f663b94da468c8c98d5d86da862f1f4a737c0196253cb00bfd80d6fc51e5f06360020e8ea9369", 0x40}, {&(0x7f0000000740)="2201087f97a477c7482baa238aeeecb23fd3055d41373adcdc2c6e979d4d662da57b24f218c4dc1fbd5b4c451a1ddc24b6837816d5fc2b676c4c30a7276aa0cc4c69e8b8094d94de24e88361d63d158ccf4bc9278144ad0ca16536c950bcf72be6866e256bae63697fcc35b989067073cdaac96bfdbcbe9484fd1e3f672ea11fd9", 0x81}, {&(0x7f0000000800)="df4c65292b06e150de987408c137d990d579115942a6701af3d91c793a4c6d1671a1d78c3ac41f3d3179fe4bfd125d9677cbae0fb5589b001a673aa48f394933b189108c2d9237d61467c2d3dd00f4c29da296d4d4be6b53a1c5416231f7e03f91d93c966719a3f246dfd79c41d5ae1fc7ce17717ad955db55b1ee360ccbfcf0f02ef63f7ccec497470c362300a5d2009c846c3b4a0f0b8c6adb8e5590a4f461b66e09bb1ab077861632011ec3a481ceb7978335147eda410f133051f1e9c549ae76b39849dc86e4eb34", 0xca}, {&(0x7f0000002200)="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", 0xfffffffffffffd71}], 0x7, &(0x7f0000000980)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xd8, 0x117, 0x2, 0xbf, "62eb88963773bfd1fccedf19b9b2ca20d0c997119d4297ebceb838b6b85c1ebe9278330078114fe831a2bf97d091bb37c77b06a5315736b4fb01622f86776b3715b5daeb48bd0e273671529e9ff107f67953f5f4485c806c80a8abc93bdb498e264aefdc76dabe7df13dcdd462d43c78515faf624032d53e62c97bf7834a2324fbdeae4c03ba2b2ca74a64171b3afccabdb9c3e1ede2652ff6488fe62c78e99f66dfc939add2fe5845a2a3ab3aa995672f0a1a0536909f9ff5c7703a0645f3"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x78, 0x117, 0x2, 0x5d, "a394fefef9e7a4f45b07378a2cfa8d00f7a1f57af2b941cf889d6ea0a45c918c06f35042a92e3c73935fc59fc1bdad08e5431840a173b8593d789779ecd7c4a42c9e2d09a3189394b4da58f47a69b6b426bcc8b4e2ddae2859afd0e861"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0xfba}], 0x1b0, 0x20049000}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b40)="2a57c144041aa4b67fde1fa1e27eb01cb3666ccc0e0d5413dc22d3da9a6a1b719e89a0a3d522eb7b561c8f1b31d1e829e2dcba42c53928b8050301565729756a0b7bc4cc5481e365dc9aec9a6f3fd01fd0c6413bf4a3ec38fac28a80c5269ec4910db227ea68c5cda579bcdb8bbe70e26f9d39869989092d7c330f1626403b0c0a367b79481b6d7ee3d1af1d3525459098d0ec64be3757d39ac929c6b349eb90797880cf42cbcba86e9f905fdd2f3ae2", 0xb0}, {&(0x7f0000000c00)="3d9e38742aaed5637f11039f8dbd4be60f6ac93a60c5bcf46ae362da8bba909e08beaa210be5354709124e10c2ab13dba3b0e2ae447e5d38caf6bf5d836902ce9dbddfacf1f655f5e3868cd17c80829997d476d5b754ff9dfb6964b986d9aa9458b57e25e0bf9e53de03ce06475427253ec9dded6ecd8eecf4aa64022c0ee0218b718d5ba233b33a4eaeaa04e8a1f32ca37467f8c08996bf381dd32f1a9b62b179c855e313ec530524b0241abb688ed4687166f58ad7ecc980f9191b930cee8e1fa793148f0981c34b01d6ad", 0xcc}, {&(0x7f0000000d00)="5cb678d656de90516f886786f09d4d3d0cb9dc129665022ef4d31814d3929452fb180c099c6feed5c6f3836d0dcd7e5bddb0c68a5ab1d4e68930c6bcf8738fc32a248241dc1f65586b", 0x49}, {&(0x7f0000003200)="1da4c44dea8505313a74670bb07577983785c4ebed429cbca91af3892aa2104ad83dbd3814d344a55da0febf2dc167656001dffb8fd4900d22561f32c988434b2b933a2e8b7fdaecb6762a0d59da7301dea55d9e4fc0f6e288c8f9523307b95cc380b00bdc4cfb9291cf4b7cb746a37a4c63cb0945b568a8c359bed1096254f1f497c12e3d8fe3189585b7ebdd9706ee835a725ca6b5936c0c63f10bf5e8a36141cd21d55be376c679d2adabc663eb148aba1cac916342930e6bab989df51ce9ff8f2a148c21efa18f5be191a8c7b1dcf0fb18120a603bc07872ffeec86413e834a358d58defbbf841973178558b1a22319eda3183c8198c58002b91c214ee379f6711c84ac3ae8c6f5952756e920bea2828db3fc633a073b01e461728e69bbd29d055b050ac7af49044e41c50ddecfcda51b53d08569e104dcb408f1f0af0a147512dab392e0d0438d02b82b1db8ce2d9e8de203ef549154d7c331f783d3d4d8d9935fca60d6a17ee6dfd405b4656c91e6e948cae8c2ea9d6102d8346ad0600fdb66699a603941599baaeb3b58fee266e75195bc51106b9d0ea8554e647fcbf755d0406b55c34b84dcb0145eaf9b6aaa895f4461324c06334466199a071c7ee40999a3d3803f19d36421fe6e64ba020d2a18356b70189e86118f2a1cac69ae1f78b5eca8bd3b61fd365c6041278882da39c322d3eff55b1831883faf94ea536b53e8d69502b5b2d1b6282efdcc4ea9c84f8b16d7ec29a046affaac2fdd618fb877666e7f9a34636d8b24c3bea41fb6e4fbd2250c85cb616647e19aa10d34bf9c959ad92edcee1f9c222b2c9c0e5c7e815d61557d0bb6fea249e29974d60f7aa879d36c9a64327838ab487e494efd675d25184233e43ca1432e1f728e36c902e06dba6a85ff3328c49d5cf5b44ad126602ddb1f56e3711b66bb9ec783bf8db1abaa8a3a5daa0febc30faf7de2f5a49da65d2fb54c6ac3ebc80461d354da455792a59a0d1930eb6523280c218e043eb13510ca3e0f3a1acb4f7f41328493b3c95b893cfc1e69b1a1f6e1904cf38d0b41e3b69e805801e3fc282c571bbecb5dac9fbc4718d11b4c5cf8430c44a5ee46230f0d2eb1fcc93bf6999c7fa1fe5f8aeea2cae0d3e8f6e632a604b905289aeb308f7a08870473563bfa9d7a1159ffe292f12a893af408455f7ae95f76f362bf67c98a48a315b065b39faeeb375deaf1c6650269e601b7e48df4376139829584a20d262ddfcfd46b6d8a1d0cbb0cb2fac00452802d4d0b8375a5817fe4706d0686b80bc19affefe037f578a65ee65354f59b83088ea237c3c4987973c9d53c8dbb50298c9e19a23b64b3964196f1c6ca8d6739acea26231c42d2a7e86787ba36d74e8bfe54f5dc2b88d625f0309c5e644e9cab8a649e387b6466ea6a7c8b73861aa0ad1ee95d2ec55ea09f36deb173490297b406f9e61b4d78c8d840a5cb5a35f825ff00b85b1d218fa16e5ca64bb25d3a3c98a102423bd31f5acb8aee16b8619808baf04c5401856c54353ed5a182390aa94566a1443fd5436246fdcb48d272ccdcb44d5d1af9636d8103290f1bedc61acbb250ddb5cb634769c7cdd8f39c84ba05f02941d23b583b2deee39116e4154d2963949d7a0437d8f8aed0bb6f1c69efcbd6779cb3186cf9bd972c20e1b51ca31c42e4f067ddff7c6a10a5325d42d1e6430cd8758a6936760e7b12e89fe4b72625338626f25c2a74000c148ae5ef2e27a28f8bd0ce52c45f70e21a76ae40cd274508f6744428f4e026332ba48b6d84d47c67bad1481f43e22ff5b1ee3c093521b53ad76c936d1a985e400d29d45600ff5fc7794364aa07158d2abba58000a1d8adbffc19e9468244a7ad9fdaaa8a73925b06c6b03c5cf7228e9bfe0f71ca81bd1135b70ea605a37c5de4722252bcd42cb147d5beb3383bfd6fc952bc96a68f127923dd1e6867565ba09d47deed6210c527fa745da6e1c20cd3e969cc388e7b3784f6c40238b86dfe4fe6f41c2c0224a4c721fa9900c030226662c02aab51bf5b0a45117b950867d7d31d1e1f93a12ce62d54e5faa0dd819f1b4557f31d4f0936e8bce2ea2d7ee72aad7fb4958e2496b45c430355fb6dc9a4810cc7213de0bf227a32acd8dc41d879d0e0c69ad3b4d775231693e6642460fa68cc821207d053206774f65d191bd3dc5b93bf872ab9c4854b41d8e11eded1ce3e9fe70ef0aee36838fca19f6670ecd9cd6592436fb6e7f054ac04f1e604cf587aa7ee2c391ed9103dd56b64e8b7c15e1ce9088982f7e5325a302f143d7b64441b94c33395abbf7bd0b841bbda00a104d5b06f1e06ccaea51179ec283b99e6f7ca0d3393813a9c5d5dd8fcb6898a011cc86ec780749a2683e285331803be24c2237ebca5ae650ccdea2dd33ed8e613a269642e090d2e1e8c1f57922c650865f8db0c1c29fd59cbe8a88e229bc61424fb56d92e5b9fa2091f2701feb51585aa05199100cb899371b027e0d08d5a2346b25361c8263d97c07b08f1cf5ff1393b9600fd11b85fe057e3b818070bb453a0cb1b0dfedf64d9b6a62d4ffa80c64f81d2577e8c5f7bd1efe9b8d178cb3d4942d1da432adcfe1ec695e7c4dd6fe23ad05dcbd7dc40942cde2cf94b10591aeaf4f59ba65c7989bdf34577e8a6b3742c99e153ced74482b819aa6d21acc2815803b29428ce9789a69b0f335a0ba665d1162e3f9155ff2eb8955c550d83c57ebdde8ea559d7ee1e04cce7541489391370ac8fa8c66e494b064747c9a993e92db73a72b6a5910f527281be05cfdc866704e3736bcc10b4af8c4087bfec760a93bb64168622db098c0e1ee3d31cdbc98d8820f8e4c0a556da1ad98e05eb14277d8383f9ec0dad2cddae3838d21289e15d9a55bd15139c7387fcf2dab01a6d546859111ea32f1ca5597cd68548ae12a7e945e2bc0063011c2e6e10af63102a27ffad7a3f521c040a8402963c2ccc376438f6fdd3ee917468bdad4130c8949da9b1baa4b14e8272bff56ba201338d21848d8bd55db21dc85459ecee5aca7e45bfcf4808f575035601fe573d64fc3612cb91531632528b27bf367d0ed40be4e9622742bae393d1d4b5a606a8e9f869ff79da4e165936838610fce7150abcbf7961e0d4dec978b14ff1313038a187e8cdd15481fb460779d936ab11fe6276478ba6871819c923daea27814e3152019c14a1947ab32e13c9b65c34185b6cbcdfd355538ea4e967ac4119e1009ecc03490327e59245b76898a34b91da7c2256b55152d7613ccf21432c9991968902225246d26cde51ec1acf491a0f15557f137b49e8bc0e4149952ebe90ce278d37b161d53fada9b283c052e79dadf5b2be2d0d4981978fa94135b6c7b1f08e284a2287f48ee2fd50b5be504ac2a05d5f5a193a98e5d82e46f06bb0fd2d3e10930b9ab4ff1c0f512a60640162d1e3de30e64665015004e434f0857d5815ce0d02f698d954cbacf7a076bb701268d28433a23518b31a54df33a20f830d1fdee03c9cf36362fd9e7ab622985ff5d2a95ada95c334bb4f2968449f6ec61162dd461131bc71fde187ad36495a89ca08e0169a966f8561835f73095887fba7d461010fbf814608e6d5f01e4dbfc5f58c1038485875973230df1004fc5d09a805ce139881f2333bb867bae4a88b3207dc25e22e38ee985cda8dc0e4e81ee5d8d5281e09389bff44d760dd07260a3a8598aba7b58322c59942b331939e916d8fb54be63e94d0a6ee972bfd3cce64c22a4faee368d8649fec5ce7f40c03d4cb05a43f76e298083be2723bcada57536cdd1b9b4eb0062bb4dceeb989807c7c780be6d47a1a5da27dd94a5702b82381f9d615c31f3dcb9b2683068641a8eef93e2017c47485673f569d40963a2ce5bfc7e756fcbd3af70b49133245a7603b25fe51f429e6cfd6dbe5f04c924faa971a968557dfec1a2d2695e415343280da1b2f3f700f990092f06f0f4bc175dc3fec0e0c94cb861bbc6f0ab7e9cba4c9970effc736cc58d9d041336896b2da661c7636405317bc761ec97de9c2c0717418737569892a57342fc4f349f15530ff08a1d5420cfd838ac6086f54985615c66ed24b5466994a63c8dc25fd7ed508e8fc3744a9119fb818955a2209b5f868bc5e01916bcbe627f59b2abb62492b39e026d32dd504c994e5f6034214ae807d147f86120d9b4318867167f0e48a886c0d40df6405b9ec9738376afbff70ca0053fdda59bbd6a3eb6960438fb57603d6f7574f43f0c07523deaea1c84c656eed3a8896bce525679fc8d5bbfa5522836007d43c98c035d25add063bdd360530d730201472bc5354d2e2a2f67b61810cd4b94c4a3d8811f4333b35abb379641af517dbc2e91ddb84f8130f1fd1f8466471c761e6f4d26081a6eead04fc7291ff0769d4e297991d9938fe3280c75f616006cace924d8e49afb4ed93b53686a9645e99770459a9a31dfd331c0c01562a9874538634c7d774aee192e9600e56cc9eea0545f5ef4a6725283a0ad885ea6170ed014790096d81ae0460d4338785e01a10220f0cabf30d22c2dd81f55819857b87931eaa0baab93308aba946f133a7cc1c0aaebe5f1941902b3c18ee49932b6e06ceb8b004995aca0cc3cdf03fdc9d7a1feadc2244e8304757bbd6ea944a783049449de573c880742795e48a98e90eac13ec844c488fa4bfecb87f7415279d07e8fab229fa887f6292ae7dd98981e7d2b5c3b27a7a555c9689aa6a9c38f41fae37ead793ba401a98cfff2e4833143dfdc4acfd5048e90c47517dca82f54914d1999e846b67ff7909b35614c874dc83a3f0d0d5fdc1bd9dd2b057edf2b472581f309e858500fe752929b9a216c3eb11df521b5285fbfe93cd78b1d41cd8951996f4f67b7c36326223ab370378b258bae2e4f584bd099287e8e23435d77d78db210928d3d45eb8e080bd88d5f149e07f9b41f67559fe7243f3a6c177df347008a0b51841e35760b909a8b0864ae80f9b841a64d04a2bd08f82bf97fe89627907d76a36bdf9f759a1d53d5dcf28ff32cae544b8caaff30f1b98fa990dd57f23717ab954bbf841f27c4be824137b7395e19d5bd6d51bd5c12c5acc02f20d8eff85ceda0d02f67b4ada8075385c32e8ae62fcd8b0818488dfa7ba5195bb289d65a7adf598e996208ebb571457b9a7c90a79fc01c9b2f717bb545bfc665c8039f5e9585d3d2b1385e3b1c10df5f3917c288d4d371c517e92ec736d4c38c9840f1a4f9396c40257585c803aac25b6d09f6a841100d9e9131553cb9b11ddc7cac823b8c1adb387c23b43324cc685e96c6e16ed39ca802d2d8e01c6ddb3c994d7477478f3fec82b3d216321359680317636010ef2a5fb1e213dce95e143a3891c25598078856204e9b7bd7e83e393cb760f52831809694359ed047c64a2bf43174274be52886362d65aac421434a3dfff1926ef9d7568030b019382977801026d0e9ef3f86c1496e9a5309b392e9a0321ea2c6995b9a62f57deab82324c5c12e07d50eeac4166a5f55d0953df4046204401ac11bb8a89e53215d53ea81f93dbcecf561262f6c3f3ad8f971df6fa7a3fe61211c89f1c1fb79578d27a4b7b78823c959bc6b5280eb01bbebd75436c7a710c984d08144094144b4054a3d1a876b8bc29b43c2dbf854541128e6d8ef136a63ca75bd7a99283a1498fc925e294a488addeb6262dc840053e1bf33af08755e058c26943db0f514e172bc520a9e76aad0a1b5f9803f9217754539fe23118471c4b64e04c756e1a1f0e7c3f9660b8197b38feea739c30dd3d9202dd8539fd88a09", 0x1000}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="dcd5158aeafe8d5ac83046f21c794a5c74b6a7bca9d3b580e4bfa7c9a231e5d3c6ec2ba34c34ac11d13659ae203c3dc67a026a17080bf800b751223484633551c16a8f468a25e684e1baf678316cb1036722724821126cc231f4f64b0f37e49dbdfd97ebbe1ea09ec77ced597e0929c2f0622d04362ef73d7ab6adaf8989f75a99338fb6667d6e917930e723feb0db", 0x8f}, {&(0x7f0000000e80)="4ca0bbbc829521e71c6a3a03df7728c5d0c66da59e55dc6d03280a434e6cda7273d319a33d89845f4c65c035d3a29cea82a9f60772950e9ff6311fcea9f01a89673abffdccfae4b4c64af70a8ddd2348ca82f3b041ee011e47f2da1fa28e5ec5a51be7c5ce6a175d95fec244e1c6dfacba3d9bb48f3925ff80170a60eb8743aeec489d436790722c9056e146d9fb3e8892901abd0eee12a7153fd02a8806226167038b8a", 0xa4}], 0x7, &(0x7f0000004200)=[@iv={0x98, 0x117, 0x2, 0x82, "e0a0d2d1fc19d2b2de5237ed322b796d1aade96b7f27145368cd6f2484d24c657109c33233183cab7299927de901dee58a95f92e0b5851a19e510740d1e51fb4f3d9a48cb76d4ce6275af3b96c828cbc9a4da062b9ef0424f35b81d095ba4ba83fb6587a25c4019f8a3cb6c0520ddd7e90696f1eb101bf42a5dd4c42533d8f20b1fc"}, @iv={0xffffffffffffffb4, 0x117, 0x2, 0xe5, "31009a78d15ac6ac4eb909d113b6bea357d559fd2cce1aa6d723c7b364d7eb34cf8fb278da843786a64f0a0cd202e1323571b05ae3c3ac51cb93046d7448dca3f6c2387a101016f5f449f7609ec9e119c06bededa32aee3fb2251454bb550069b66b3f523cba126113e18ad720d8f07084c291b42c4280b2c9f51906260c29f70a24606a970c059c5821d3bba4ada6ab1c46aa057d2ac2f602a79a6c1f3dc54194b1ff52f5283855cac468dfbc6537e8dbd4e67f271a763c90ca80177069c01a37fb9dd54b62d9772a9440f030a01e8e218554f2205bab0a8eb7101fcf9e61cc49358e49da"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9c, "980c23b2f7ffe7b44859ecb575072d1c49ec7e60467c13bf41960e29dbbef4ab133636c96f0ed57d5afe4292c96e50f2320e3cd76bbe484b8dfa22778f377a8f816f4a6efa70a51fa3108a0eec492ba702fbde56f9389f1a55f39e47bbe0224f16cadcdbb8999576415a092d344165cb9b6962f56039388d36e445e3fdab708ad0f12a3d1e379ec6285dd89564fdfc393b06b641f51a439ef9bbd039"}, @iv={0x80, 0x117, 0x2, 0x6a, "ef9c250c26380224633256e3189c6a8d53665ae15f95b750c1761ab1fa58a680742edc4f42ba869a64e521a6afb8b8a4c07b6beea48d152c1d52cf9bab9f778b21813a862744342b0ba3ad74e0c3029c3761d463a7290d8dd684fcd2bd083b1d88e19d9d5cb9fe6436d7"}, @iv={0xa0, 0x117, 0x2, 0x85, "d822eed8d9437fbc4474e8e8932ee381aea312856dea8bcf68864df9def589e8ce677662f8f95d91bc297a580916988f322b283ff7560197593c540296353ad8cf095d3e9121fa8725bac3b3fc21a1f47e0afb2c6645a1bca23b8cdca975a59a4c05c6544fb142ad367f46e42f4a2b1ce4f3e4bda1f5678ec47ae00fb0fd98aabae9e03f19"}, @op={0x18}], 0x3b0, 0x80}], 0x3, 0x0) getpeername$unix(r8, &(0x7f0000000180)=@abs, &(0x7f00000002c0)=0x6e) 06:17:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100), 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x23, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100), 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 388.145511][ T28] audit: type=1804 audit(1591942676.219:352): pid=17619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/213/cgroup.controllers" dev="sda1" ino=16375 res=1 06:17:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x25, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000007}, 0x2f) 06:17:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xff24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xcc, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xde}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x107}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x881) sendfile(r4, r3, 0x0, 0x100000001) 06:17:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 389.014380][ T28] audit: type=1804 audit(1591942677.089:353): pid=17657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/214/cgroup.controllers" dev="sda1" ino=16371 res=1 06:17:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) bind(r4, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="57b2b3abce1b67c40bfea9cf582f9cf02379f04d30df648a559f09a75b2c33ddad933e51f5074c01735b842520b04bd4b1b5e48da9bd815356434d74b6af187ef016970a7f24c79a36826a3099e4d935239c7f7213bfda3c230498eec5bc003954aea287ea5d8be9f11b35c0b1385f993ac3cbdbe59d253946fa2f2647d4f2f3bd9482aa7009b1e2cc8eae4ba2db965e93f026ca3de5f8de3ccc3ccc0b51491b4f3d32c2f9172f935a0f917a9a41a58a0fe4dc41b6bc60b109b3a0f5c5"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000001) [ 389.321322][ T28] audit: type=1804 audit(1591942677.399:354): pid=17673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/215/cgroup.controllers" dev="sda1" ino=16376 res=1 06:17:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904", 0x17}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6b, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000008}, 0x2f) 06:17:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x8, 0x1f, 0x6}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:17:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 390.116101][ T28] audit: type=1804 audit(1591942678.199:355): pid=17704 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/216/cgroup.controllers" dev="sda1" ino=16367 res=1 06:17:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904", 0x17}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x71, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000009}, 0x2f) 06:17:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x72, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x1], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x75, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904", 0x17}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:17:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x3a, @loopback, 0x4e23, 0x0, 'dh\x00', 0x1, 0x1000, 0x5e}, 0x2c) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) bind(r2, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x1}, 0x1, 0x0, 0x0, 0x48885}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 06:17:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 391.422314][ T28] audit: type=1804 audit(1591942679.499:356): pid=17760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/218/cgroup.controllers" dev="sda1" ino=16380 res=1 06:17:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00000a}, 0x2f) 06:17:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x76, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:17:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:17:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a83587cff000100e9000500010047000000000000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:17:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x77, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 391.931305][ T28] audit: type=1804 audit(1591942680.009:357): pid=17785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/219/cgroup.controllers" dev="sda1" ino=16382 res=1 06:18:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d", 0x23}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x78, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00000b}, 0x2f) 06:18:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x79, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:18:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7b, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 392.859553][ T28] audit: type=1804 audit(1591942680.939:358): pid=17833 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/220/cgroup.controllers" dev="sda1" ino=16383 res=1 06:18:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d", 0x23}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) 06:18:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7c, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000010}, 0x2f) 06:18:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7d, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) 06:18:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003b80)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000003c80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000004980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004940)={&(0x7f0000000400)={0xc74, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x7, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x1, 0x1}, {0x800, 0x3, 0x1, 0x4}, {0x6, 0x40, 0x7f, 0x7}, {0x1ff, 0x1f, 0x3, 0x8}, {0x2, 0xf9, 0x2, 0xfffff000}, {0x3, 0xff, 0x7, 0x3ff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x7ff, 0x6d, 0x20, 0x9}, {0x8, 0x5, 0x7, 0x5}, {0x5, 0x81, 0x81, 0x81}, {0x7, 0x80, 0xff}, {0x0, 0x8, 0x5}]}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xe18f}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xb2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xa61}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0xc74}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000140) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r7, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff9}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6ffe936a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000054}, 0x40) 06:18:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x82, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) [ 393.788336][ T28] audit: type=1804 audit(1591942681.869:359): pid=17870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/221/cgroup.controllers" dev="sda1" ino=16373 res=1 06:18:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d", 0x23}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x83, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:18:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000063}, 0x2f) 06:18:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:18:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x3, 0x0, @dev}], 0x10) 06:18:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43, 0x101}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="5c00cc04", @ANYRES16=0x0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f00"/86], 0x5c}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)={{0x107, 0x6, 0xec, 0x197, 0x2b1, 0x6, 0x120, 0x80}, "6568e3090000002f9aa57f99ae4d07639c8fded29a362e9d5634b6351866e9025e9fa5c9ba91ebb0bc1d5e8d2907dbe0c84ab9934fc13e60483f462908c8fd45af6128f76a404e86c6d4fd0c72c610024a30d3a2646bf9c34a26f33cf7cf50b5f7e7c455fe9874c7f7e4612a282d523942daf64c088c916704790b0b60c888afd06906bef62c183ae9a412453fdebba73fa3401d1f4c298ba4d1c5689153c4526f35dc73b0eecb73b2e693e37447d1"}, 0xcf) [ 394.634858][ T28] audit: type=1804 audit(1591942682.709:360): pid=17911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/222/cgroup.controllers" dev="sda1" ino=16382 res=1 06:18:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:18:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x4, 0x0, @dev}], 0x10) [ 394.756596][ T28] audit: type=1804 audit(1591942682.779:361): pid=17915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/222/cgroup.controllers" dev="sda1" ino=16382 res=1 06:18:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e", 0x29}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @multicast1, 0x4e24, 0x1, 'ovf\x00', 0x22, 0x80000000, 0x14}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0008150706010358d43a8358e65507665647000000000000"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) 06:18:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 395.192714][ T28] audit: type=1804 audit(1591942683.269:362): pid=17930 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/223/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 395.316884][ T28] audit: type=1804 audit(1591942683.399:363): pid=17931 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir820302372/syzkaller.3vxvXS/269/cgroup.controllers" dev="sda1" ino=16369 res=1 06:18:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000077}, 0x2f) 06:18:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x8, 0x0, @dev}], 0x10) 06:18:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x4058001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0xe, 0x7fff, 0x4, 0x5, 0x23575b69}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010358d43a83587c92000100e90005f56e9141bd92c00c67020ad8e8ccc8f99bbe82b62da44174c59e9d0b62a80dfdb8ae6fd47908f3ae8cc3a23b4a05ecce60e54f8fa72c7e7e20d7346b8bea8c2c86e39e8e219e0000000000000000000000008e8fff"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) 06:18:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x9, 0x0, @dev}], 0x10) 06:18:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) [ 395.630849][ T28] audit: type=1804 audit(1591942683.709:364): pid=17949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/224/cgroup.controllers" dev="sda1" ino=16366 res=1 06:18:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) 06:18:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0xa, 0x0, @dev}], 0x10) [ 395.757230][T17949] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 395.780672][T17949] File: /root/syzkaller-testdir599089010/syzkaller.yQLGpU/224/cgroup.controllers PID: 17949 Comm: syz-executor.5 06:18:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e", 0x29}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) 06:18:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0xb, 0x0, @dev}], 0x10) 06:18:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0xa, @loopback}, 0x2f) 06:18:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000500}, 0x2f) 06:18:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:18:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:18:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x10, 0x0, @dev}], 0x10) 06:18:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:18:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x14, 0x0, @dev}], 0x10) 06:18:04 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 396.693761][T17996] FAULT_INJECTION: forcing a failure. [ 396.693761][T17996] name failslab, interval 1, probability 0, space 0, times 0 [ 396.714579][T17996] CPU: 1 PID: 17996 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 396.722933][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.732994][T17996] Call Trace: [ 396.736301][T17996] dump_stack+0x188/0x20d [ 396.740735][T17996] should_fail.cold+0x5/0xa [ 396.745254][T17996] ? fault_create_debugfs_attr+0x140/0x140 [ 396.751084][T17996] should_failslab+0x5/0xf [ 396.755508][T17996] kmem_cache_alloc_node+0x25c/0x760 [ 396.760801][T17996] ? __sk_dst_check+0x139/0x2d0 [ 396.765667][T17996] __alloc_skb+0xba/0x5a0 [ 396.770006][T17996] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 396.775558][T17996] ? tcp_write_queue_purge+0x656/0x15a0 [ 396.781122][T17996] ? __tcp_md5_do_lookup+0x298/0x6b0 [ 396.786421][T17996] sk_stream_alloc_skb+0x106/0xc70 [ 396.791541][T17996] tcp_connect+0xfb3/0x42b0 [ 396.796072][T17996] ? tcp_fastopen_defer_connect+0x11b/0x3f0 [ 396.801971][T17996] ? __tcp_transmit_skb+0x3770/0x3770 [ 396.807361][T17996] ? siphash_1u64+0x13/0x260 [ 396.811982][T17996] ? secure_ipv6_port_ephemeral+0x250/0x250 [ 396.817880][T17996] ? xfrm_lookup_route+0x65/0x1e0 [ 396.822907][T17996] ? dst_release+0xd/0xe0 [ 396.827243][T17996] ? prandom_u32_state+0xe/0x170 [ 396.832193][T17996] tcp_v4_connect+0x14f0/0x1c10 [ 396.837068][T17996] ? tcp_v4_md5_lookup+0x240/0x240 [ 396.842239][T17996] __inet_stream_connect+0x80f/0xe30 [ 396.847539][T17996] ? lock_release+0x800/0x800 [ 396.852226][T17996] ? lock_downgrade+0x840/0x840 [ 396.857086][T17996] ? ipv4_mib_init_net+0x570/0x570 [ 396.862206][T17996] ? mark_held_locks+0x9f/0xe0 [ 396.866980][T17996] ? __local_bh_enable_ip+0x159/0x270 [ 396.872358][T17996] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 396.878342][T17996] ? lock_sock_nested+0x94/0x110 [ 396.883285][T17996] ? lock_sock_nested+0x94/0x110 [ 396.888237][T17996] inet_stream_connect+0x53/0xa0 [ 396.893318][T17996] ? __inet_stream_connect+0xe30/0xe30 [ 396.898792][T17996] __sys_connect_file+0x155/0x1a0 [ 396.903836][T17996] __sys_connect+0x160/0x190 [ 396.908442][T17996] ? __sys_connect_file+0x1a0/0x1a0 [ 396.913661][T17996] ? __this_cpu_preempt_check+0x28/0x190 [ 396.919313][T17996] ? fput_many+0x2f/0x1a0 [ 396.923668][T17996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 396.929260][T17996] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 396.935271][T17996] ? do_syscall_64+0x21/0x7d0 [ 396.939959][T17996] __x64_sys_connect+0x6f/0xb0 [ 396.944733][T17996] do_syscall_64+0xf6/0x7d0 [ 396.949251][T17996] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 396.955146][T17996] RIP: 0033:0x45ca69 [ 396.959047][T17996] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.978666][T17996] RSP: 002b:00007f6c893a4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 396.987084][T17996] RAX: ffffffffffffffda RBX: 00000000004db400 RCX: 000000000045ca69 [ 396.995071][T17996] RDX: 000000000000002f RSI: 0000000020000140 RDI: 0000000000000004 [ 397.003056][T17996] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.011037][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 397.019020][T17996] R13: 0000000000000088 R14: 00000000004c3469 R15: 00007f6c893a56d4 06:18:05 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e", 0x29}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 06:18:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x2f) 06:18:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x3, 0x81) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)={r4, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x9}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_dccp_buf(r5, 0x21, 0x2, &(0x7f0000000280)=""/195, &(0x7f00000001c0)=0xc3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00e90005000100470000000000000000000000000000000000aedd5a863dd59595cef5ffb4caf4bfd3777b562f46bfd89c27d91d5fadd671fbc64f6365210c95de9037b1aeed27185ad6161619cd9bd0beb3c601cf2832c91619f494123fd80f0b18bf87d055ddbf3979e813f15e98235438e2b360ad96e930e86a8fc8857ae4de0b72d69792caba38a5ce02a5a1764ac44e709446673e419316c9335970807962454c925ce0278f25"], 0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) [ 397.362198][ T28] audit: type=1804 audit(1591942685.439:365): pid=18008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/226/cgroup.controllers" dev="sda1" ino=16367 res=1 06:18:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00ff00}, 0x2f) 06:18:05 executing program 3 (fault-call:6 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:05 executing program 0 (fault-call:6 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 397.515021][T18018] FAULT_INJECTION: forcing a failure. [ 397.515021][T18018] name failslab, interval 1, probability 0, space 0, times 0 [ 397.530331][T18019] FAULT_INJECTION: forcing a failure. [ 397.530331][T18019] name failslab, interval 1, probability 0, space 0, times 0 [ 397.561892][T18018] CPU: 0 PID: 18018 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 397.570337][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.580396][T18018] Call Trace: [ 397.583683][T18018] dump_stack+0x188/0x20d [ 397.588002][T18018] should_fail.cold+0x5/0xa [ 397.592511][T18018] ? fault_create_debugfs_attr+0x140/0x140 [ 397.598309][T18018] should_failslab+0x5/0xf [ 397.602714][T18018] kmem_cache_alloc_node_trace+0x27c/0x790 [ 397.608508][T18018] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 397.614492][T18018] __kmalloc_node_track_caller+0x38/0x60 [ 397.620198][T18018] __kmalloc_reserve.isra.0+0x39/0xe0 [ 397.625749][T18018] __alloc_skb+0xef/0x5a0 [ 397.630063][T18018] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 397.635596][T18018] ? tcp_write_queue_purge+0x656/0x15a0 [ 397.641122][T18018] ? __tcp_md5_do_lookup+0x298/0x6b0 [ 397.646482][T18018] sk_stream_alloc_skb+0x106/0xc70 [ 397.651579][T18018] tcp_connect+0xfb3/0x42b0 [ 397.656089][T18018] ? tcp_fastopen_defer_connect+0x11b/0x3f0 [ 397.661977][T18018] ? __tcp_transmit_skb+0x3770/0x3770 [ 397.667342][T18018] ? siphash_1u64+0x13/0x260 [ 397.671946][T18018] ? secure_ipv6_port_ephemeral+0x250/0x250 [ 397.677834][T18018] ? xfrm_lookup_route+0x65/0x1e0 [ 397.682853][T18018] ? dst_release+0xd/0xe0 [ 397.687179][T18018] ? prandom_u32_state+0xe/0x170 [ 397.692114][T18018] tcp_v4_connect+0x14f0/0x1c10 [ 397.697392][T18018] ? tcp_v4_md5_lookup+0x240/0x240 [ 397.702517][T18018] __inet_stream_connect+0x80f/0xe30 [ 397.707799][T18018] ? lock_release+0x800/0x800 [ 397.712474][T18018] ? lock_downgrade+0x840/0x840 [ 397.717306][T18018] ? ipv4_mib_init_net+0x570/0x570 [ 397.722407][T18018] ? mark_held_locks+0x9f/0xe0 [ 397.727265][T18018] ? __local_bh_enable_ip+0x159/0x270 [ 397.732621][T18018] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 397.738581][T18018] ? lock_sock_nested+0x94/0x110 [ 397.743536][T18018] ? lock_sock_nested+0x94/0x110 [ 397.748459][T18018] inet_stream_connect+0x53/0xa0 [ 397.753386][T18018] ? __inet_stream_connect+0xe30/0xe30 [ 397.758826][T18018] __sys_connect_file+0x155/0x1a0 [ 397.763848][T18018] __sys_connect+0x160/0x190 [ 397.768419][T18018] ? __sys_connect_file+0x1a0/0x1a0 [ 397.773599][T18018] ? __this_cpu_preempt_check+0x28/0x190 [ 397.779216][T18018] ? fput_many+0x2f/0x1a0 [ 397.783533][T18018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 397.788972][T18018] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 397.794932][T18018] ? do_syscall_64+0x21/0x7d0 [ 397.799604][T18018] __x64_sys_connect+0x6f/0xb0 [ 397.804361][T18018] do_syscall_64+0xf6/0x7d0 [ 397.808850][T18018] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 397.814724][T18018] RIP: 0033:0x45ca69 [ 397.818602][T18018] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.838302][T18018] RSP: 002b:00007f6c893a4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 397.846693][T18018] RAX: ffffffffffffffda RBX: 00000000004db400 RCX: 000000000045ca69 [ 397.854645][T18018] RDX: 000000000000002f RSI: 0000000020000140 RDI: 0000000000000004 [ 397.862611][T18018] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.870574][T18018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 397.878526][T18018] R13: 0000000000000088 R14: 00000000004c3469 R15: 00007f6c893a56d4 [ 397.905183][T18019] CPU: 1 PID: 18019 Comm: syz-executor.3 Not tainted 5.7.0-syzkaller #0 [ 397.913550][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.923699][T18019] Call Trace: [ 397.927092][T18019] dump_stack+0x188/0x20d [ 397.931428][T18019] should_fail.cold+0x5/0xa [ 397.935951][T18019] ? fault_create_debugfs_attr+0x140/0x140 [ 397.941826][T18019] should_failslab+0x5/0xf [ 397.946255][T18019] kmem_cache_alloc_node+0x25c/0x760 [ 397.951553][T18019] ? __sk_dst_check+0x139/0x2d0 [ 397.956420][T18019] __alloc_skb+0xba/0x5a0 [ 397.960933][T18019] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 397.966490][T18019] ? tcp_write_queue_purge+0x656/0x15a0 [ 397.972042][T18019] ? __tcp_md5_do_lookup+0x298/0x6b0 [ 397.977344][T18019] sk_stream_alloc_skb+0x106/0xc70 [ 397.982467][T18019] tcp_connect+0xfb3/0x42b0 [ 397.986995][T18019] ? tcp_fastopen_defer_connect+0x11b/0x3f0 [ 397.992903][T18019] ? __tcp_transmit_skb+0x3770/0x3770 [ 397.998295][T18019] ? siphash_1u64+0x13/0x260 [ 398.002906][T18019] ? secure_ipv6_port_ephemeral+0x250/0x250 [ 398.008860][T18019] ? xfrm_lookup_route+0x65/0x1e0 [ 398.013889][T18019] ? dst_release+0xd/0xe0 [ 398.018225][T18019] ? prandom_u32_state+0xe/0x170 [ 398.023177][T18019] tcp_v4_connect+0x14f0/0x1c10 [ 398.028088][T18019] ? tcp_v4_md5_lookup+0x240/0x240 [ 398.033303][T18019] __inet_stream_connect+0x80f/0xe30 [ 398.038600][T18019] ? lock_release+0x800/0x800 [ 398.043377][T18019] ? lock_downgrade+0x840/0x840 [ 398.048239][T18019] ? ipv4_mib_init_net+0x570/0x570 [ 398.053362][T18019] ? mark_held_locks+0x9f/0xe0 [ 398.058142][T18019] ? __local_bh_enable_ip+0x159/0x270 06:18:06 executing program 0 (fault-call:6 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 398.063532][T18019] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 398.069526][T18019] ? lock_sock_nested+0x94/0x110 [ 398.075173][T18019] ? lock_sock_nested+0x94/0x110 [ 398.080278][T18019] inet_stream_connect+0x53/0xa0 [ 398.085237][T18019] ? __inet_stream_connect+0xe30/0xe30 [ 398.090712][T18019] __sys_connect_file+0x155/0x1a0 [ 398.095909][T18019] __sys_connect+0x160/0x190 [ 398.100569][T18019] ? __sys_connect_file+0x1a0/0x1a0 [ 398.105784][T18019] ? __this_cpu_preempt_check+0x28/0x190 [ 398.111428][T18019] ? fput_many+0x2f/0x1a0 [ 398.115775][T18019] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 398.121257][T18019] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 398.130293][T18019] ? do_syscall_64+0x21/0x7d0 [ 398.134989][T18019] __x64_sys_connect+0x6f/0xb0 [ 398.139767][T18019] do_syscall_64+0xf6/0x7d0 [ 398.144288][T18019] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 398.150792][T18019] RIP: 0033:0x45ca69 [ 398.154703][T18019] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.174420][T18019] RSP: 002b:00007f0ffd14ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 398.182839][T18019] RAX: ffffffffffffffda RBX: 00000000004db400 RCX: 000000000045ca69 [ 398.190907][T18019] RDX: 000000000000002f RSI: 0000000020000140 RDI: 0000000000000004 [ 398.198883][T18019] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 398.206867][T18019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 06:18:06 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510bef", 0x2c}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x2, @dev}], 0x10) [ 398.214845][T18019] R13: 0000000000000088 R14: 00000000004c3469 R15: 00007f0ffd14b6d4 [ 398.252365][ T28] audit: type=1804 audit(1591942686.329:366): pid=18011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/226/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 398.308977][T18032] FAULT_INJECTION: forcing a failure. [ 398.308977][T18032] name failslab, interval 1, probability 0, space 0, times 0 [ 398.321961][T18032] CPU: 1 PID: 18032 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 398.330291][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.340358][T18032] Call Trace: [ 398.343662][T18032] dump_stack+0x188/0x20d [ 398.348021][T18032] should_fail.cold+0x5/0xa [ 398.352554][T18032] ? fault_create_debugfs_attr+0x140/0x140 [ 398.358473][T18032] ? __nf_conntrack_find_get+0x9f4/0x12d0 [ 398.364231][T18032] should_failslab+0x5/0xf [ 398.368669][T18032] kmem_cache_alloc+0x44/0x740 [ 398.373445][T18032] ? __nf_conntrack_find_get+0xab4/0x12d0 [ 398.379175][T18032] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 398.385168][T18032] __nf_conntrack_alloc+0xd6/0x6b0 [ 398.390299][T18032] init_conntrack.isra.0+0xd7e/0x1080 [ 398.395686][T18032] ? nf_conntrack_alloc+0x40/0x40 [ 398.400719][T18032] ? hash_conntrack_raw+0x2d9/0x460 [ 398.405928][T18032] ? __local_bh_enable_ip+0x159/0x270 [ 398.411400][T18032] ? ipt_do_table+0xd23/0x1880 [ 398.416178][T18032] nf_conntrack_in+0x9ae/0x12b0 [ 398.421052][T18032] ? nf_conntrack_update+0x1250/0x1250 [ 398.426530][T18032] ? lock_acquire+0x1f2/0x8f0 [ 398.431228][T18032] ? debug_smp_processor_id+0x2f/0x185 [ 398.436772][T18032] ipv4_conntrack_local+0x119/0x210 [ 398.441984][T18032] nf_hook_slow+0xba/0x1e0 [ 398.446435][T18032] __ip_local_out+0x3d4/0x850 [ 398.451162][T18032] ? ip_finish_output+0x1f0/0x1f0 [ 398.456203][T18032] ? __ip_flush_pending_frames.isra.0+0x300/0x300 [ 398.462639][T18032] ip_local_out+0x26/0x1a0 [ 398.467080][T18032] __ip_queue_xmit+0x863/0x1c20 [ 398.471947][T18032] ? tcp_options_write+0x2cd/0xaa0 [ 398.477066][T18032] __tcp_transmit_skb+0x1a18/0x3770 [ 398.482283][T18032] ? __tcp_select_window+0x9f0/0x9f0 [ 398.487582][T18032] ? print_usage_bug+0x240/0x240 [ 398.492534][T18032] ? tcp_connect+0x1134/0x42b0 [ 398.497338][T18032] tcp_connect+0x2d0f/0x42b0 [ 398.501951][T18032] ? __tcp_transmit_skb+0x3770/0x3770 [ 398.507329][T18032] ? siphash_1u64+0x13/0x260 [ 398.511932][T18032] ? secure_ipv6_port_ephemeral+0x250/0x250 [ 398.517834][T18032] ? xfrm_lookup_route+0x65/0x1e0 [ 398.522869][T18032] ? dst_release+0xd/0xe0 [ 398.527231][T18032] ? prandom_u32_state+0xe/0x170 [ 398.532178][T18032] tcp_v4_connect+0x14f0/0x1c10 [ 398.537052][T18032] ? tcp_v4_md5_lookup+0x240/0x240 [ 398.542185][T18032] __inet_stream_connect+0x80f/0xe30 [ 398.547483][T18032] ? lock_release+0x800/0x800 [ 398.552165][T18032] ? lock_downgrade+0x840/0x840 [ 398.557027][T18032] ? ipv4_mib_init_net+0x570/0x570 [ 398.562143][T18032] ? mark_held_locks+0x9f/0xe0 [ 398.566919][T18032] ? __local_bh_enable_ip+0x159/0x270 [ 398.572308][T18032] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 398.578292][T18032] ? lock_sock_nested+0x94/0x110 [ 398.583236][T18032] ? lock_sock_nested+0x94/0x110 [ 398.588190][T18032] inet_stream_connect+0x53/0xa0 [ 398.593141][T18032] ? __inet_stream_connect+0xe30/0xe30 [ 398.598608][T18032] __sys_connect_file+0x155/0x1a0 [ 398.603688][T18032] __sys_connect+0x160/0x190 [ 398.608289][T18032] ? __sys_connect_file+0x1a0/0x1a0 [ 398.613497][T18032] ? __this_cpu_preempt_check+0x28/0x190 [ 398.619146][T18032] ? fput_many+0x2f/0x1a0 [ 398.623493][T18032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 398.628961][T18032] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 398.634961][T18032] ? do_syscall_64+0x21/0x7d0 [ 398.639660][T18032] __x64_sys_connect+0x6f/0xb0 [ 398.644439][T18032] do_syscall_64+0xf6/0x7d0 [ 398.648955][T18032] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 398.654848][T18032] RIP: 0033:0x45ca69 [ 398.658748][T18032] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.678358][T18032] RSP: 002b:00007f6c893a4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 398.686780][T18032] RAX: ffffffffffffffda RBX: 00000000004db400 RCX: 000000000045ca69 [ 398.694779][T18032] RDX: 000000000000002f RSI: 0000000020000140 RDI: 0000000000000004 06:18:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010400000000000018010000800000000025154f78cdc9276a31c8678cabff2847c91eacf80dcec609af5a6c77d1a7d99384288f82ffd6e04321b702a111404686184f24f6d92f53be030000001003ca398e4522a73409665f439f9afde25cd437253be697da7c9e70a4c64463e98b550241f7a925a6fb3934d4f5641cd95e60bdd5f3cc5e887b92a87838756057a3bcf4ad6ccc68e2d6b92a432a1d7ef912638b5e24e94f4b41386ce420554863ab301d12fee907275c33b19d68dbf00958c1130acb54e6fcdde199149215166052b0f3ec783fe86a3b40187b5e5608fb6962000000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:18:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0xac141438}, 0x2f) 06:18:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x3, @dev}], 0x10) [ 398.703222][T18032] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 398.711202][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 398.719182][T18032] R13: 0000000000000088 R14: 00000000004c3469 R15: 00007f6c893a56d4 [ 398.948019][ T28] audit: type=1804 audit(1591942687.029:367): pid=18053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/227/cgroup.controllers" dev="sda1" ino=16384 res=1 06:18:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x3, 0x4e23, @loopback}, 0x2f) 06:18:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x4, 0x4e23, @loopback}, 0x2f) 06:18:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510bef", 0x2c}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, 0x0, 0x200, 0xa802}}, 0x20}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/124, 0x7c, 0x100, &(0x7f0000000180)=@ll={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @local}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r1, 0x0, 0x100000001) 06:18:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x5, 0x4e23, @loopback}, 0x2f) 06:18:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x3, 0x4e23, @loopback}, 0x2f) 06:18:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x6, 0x4e23, @loopback}, 0x2f) [ 399.540086][ T28] audit: type=1804 audit(1591942687.619:368): pid=18074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/228/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 399.606540][T18074] bridge23: port 1(bond0) entered blocking state [ 399.628245][T18074] bridge23: port 1(bond0) entered disabled state [ 399.660993][T18074] device bond0 entered promiscuous mode [ 399.686151][T18074] device bond_slave_0 entered promiscuous mode 06:18:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x4, 0x4e23, @loopback}, 0x2f) 06:18:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0xf) 06:18:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4, @dev}], 0x10) [ 399.722889][T18074] device bond_slave_1 entered promiscuous mode 06:18:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x7, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x5, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x8, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2000016f) 06:18:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510bef", 0x2c}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x6, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x25, 0x3, 0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x4, {{0xa, 0x4e21, 0x1, @private1, 0x7fff}}, {{0xa, 0x4e21, 0x8001, @private0={0xfc, 0x0, [], 0x1}, 0x40}}}, 0x108) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x9, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r9}}, 0x20}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendfile(r2, r1, 0x0, 0x100000001) 06:18:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x7, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0xa, 0x4e23, @loopback}, 0x2f) [ 400.493406][ T28] audit: type=1804 audit(1591942688.569:369): pid=18130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/229/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 400.512608][T18130] device bond0 left promiscuous mode [ 400.537202][T18130] device bond_slave_0 left promiscuous mode [ 400.560320][T18130] device bond_slave_1 left promiscuous mode [ 400.574771][T18130] bridge23: port 1(bond0) entered disabled state 06:18:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x6, @dev}], 0x10) 06:18:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0xc, 0x4e23, @loopback}, 0x2f) 06:18:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x8, 0x4e23, @loopback}, 0x2f) [ 400.695346][T18130] bridge24: port 1(bond0) entered blocking state [ 400.702041][T18130] bridge24: port 1(bond0) entered disabled state [ 400.723647][T18130] device bond0 entered promiscuous mode [ 400.780559][T18130] device bond_slave_0 entered promiscuous mode [ 400.827402][T18130] device bond_slave_1 entered promiscuous mode [ 400.855944][T18131] device bond0 left promiscuous mode [ 400.861271][T18131] device bond_slave_0 left promiscuous mode 06:18:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x9, 0x4e23, @loopback}, 0x2f) 06:18:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x10, 0x4e23, @loopback}, 0x2f) [ 400.876088][T18131] device bond_slave_1 left promiscuous mode [ 400.882600][T18131] bridge24: port 1(bond0) entered disabled state 06:18:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befcc", 0x2d}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0xa, 0x4e23, @loopback}, 0x2f) 06:18:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x4d, 0x4e23, @loopback}, 0x2f) 06:18:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4a, "707fd8218103458fd870767f37cdce6034fe78808a6a2cdb2e4136cd070a8bb9caece88345c638dce2f3ccda7427053e70acd2a41b640b7697ca6ced3f67c73ff641039d96e0d99d7190"}, &(0x7f0000000000)=0x6e) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000100001040000000000000000000000008e061bfc46341e395bd410", @ANYRES32, @ANYBLOB="00000000000008ff79800000", @ANYRES16], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r5}}, 0x20}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x13, 0x8, 0x70bd27, 0x25dfdbfb, {0x1e, 0x1, 0x20, 0x5, {0x4e23, 0x4e22, [0x5, 0x80, 0xef6, 0x5], [0xdff, 0x4, 0x40, 0x7], r5, [0x8, 0x151]}, 0x6, 0x8001}}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x2200c001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 401.207067][ T28] audit: type=1804 audit(1591942689.279:370): pid=18130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/229/cgroup.controllers" dev="sda1" ino=16384 res=1 06:18:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 06:18:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0xc, 0x4e23, @loopback}, 0x2f) 06:18:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x63, 0x4e23, @loopback}, 0x2f) [ 401.520385][ T28] audit: type=1804 audit(1591942689.599:371): pid=18185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/230/cgroup.controllers" dev="sda1" ino=16379 res=1 06:18:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x7, @dev}], 0x10) 06:18:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x10, 0x4e23, @loopback}, 0x2f) 06:18:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x8815) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x1}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) getpeername$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) 06:18:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x240, 0x4e23, @loopback}, 0x2f) 06:18:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0xa, @loopback}, 0x2f) 06:18:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befcc", 0x2d}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x63, 0x4e23, @loopback}, 0x2f) 06:18:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x63, @loopback}, 0x2f) [ 402.188334][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000002}, 0x2f) 06:18:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f00000001c0)=0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) 06:18:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x240, 0x4e23, @loopback}, 0x2f) 06:18:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000003}, 0x2f) 06:18:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x9, @dev}], 0x10) 06:18:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0xa, @loopback}, 0x2f) 06:18:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000004}, 0x2f) 06:18:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000300)=0x7, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000", @ANYRES16=r5, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) getsockname$netrom(r6, &(0x7f0000000580)={{0x3, @bcast}, [@null, @null, @netrom, @null, @netrom, @remote, @rose, @default]}, &(0x7f0000000280)=0x48) sendfile(r2, r1, 0x0, 0x100000001) [ 402.832497][ T28] audit: type=1804 audit(1591942690.909:372): pid=18261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/232/cgroup.controllers" dev="sda1" ino=16368 res=1 06:18:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000005}, 0x2f) 06:18:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befcc", 0x2d}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x63, @loopback}, 0x2f) 06:18:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x2f) 06:18:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000007}, 0x2f) 06:18:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000002}, 0x2f) 06:18:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000008}, 0x2f) 06:18:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0xa, @dev}], 0x10) 06:18:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000003}, 0x2f) 06:18:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000009}, 0x2f) 06:18:11 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 403.538107][ T28] audit: type=1804 audit(1591942691.619:373): pid=18263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/232/cgroup.controllers" dev="sda1" ino=16368 res=1 06:18:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r3, @ANYRES16=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) 06:18:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00000a}, 0x2f) 06:18:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000004}, 0x2f) 06:18:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00000b}, 0x2f) [ 403.859221][ T28] audit: type=1804 audit(1591942691.939:374): pid=18311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/233/cgroup.controllers" dev="sda1" ino=15939 res=1 06:18:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000005}, 0x2f) 06:18:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000010}, 0x2f) [ 404.020418][T18323] validate_nla: 37 callbacks suppressed [ 404.020427][T18323] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.040162][T18323] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.049805][T18321] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 404.267913][T18333] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.288971][T18333] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.326614][T18331] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0xe, @dev}], 0x10) 06:18:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00003e}, 0x2f) 06:18:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000007}, 0x2f) 06:18:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x4, 0x4) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) splice(r1, &(0x7f00000000c0)=0x9, r0, &(0x7f0000000100)=0x6, 0x10000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:18:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) recvfrom$l2tp(r2, &(0x7f00000001c0)=""/202, 0xca, 0x100c0, &(0x7f0000000000), 0x10) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000063}, 0x2f) 06:18:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000008}, 0x2f) [ 404.665048][T18353] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.689616][T18353] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.705299][T18349] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000009}, 0x2f) 06:18:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, 0x0, 0x0) 06:18:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000077}, 0x2f) 06:18:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00000a}, 0x2f) [ 404.901880][ T28] audit: type=1804 audit(1591942692.980:375): pid=18366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/234/cgroup.controllers" dev="sda1" ino=15809 res=1 [ 404.934508][T18374] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4f, @dev}], 0x10) 06:18:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, 0x0, 0x0) 06:18:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00ff00}, 0x2f) 06:18:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00000b}, 0x2f) 06:18:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:18:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0xac141427}, 0x2f) 06:18:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000010}, 0x2f) [ 405.628631][ T28] audit: type=1804 audit(1591942693.710:376): pid=18396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/235/cgroup.controllers" dev="sda1" ino=16130 res=1 06:18:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, 0x0, 0x0) 06:18:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0xf) 06:18:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00003e}, 0x2f) 06:18:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000005}, 0x2f) 06:18:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x60, @dev}], 0x10) 06:18:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2000016f) 06:18:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000063}, 0x2f) 06:18:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000004}, 0x2f) 06:18:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) getpeername$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 06:18:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000004}, 0x2f) 06:18:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000077}, 0x2f) 06:18:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc}}, 0x20}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x9, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, @map={0x18, 0x12}, @generic={0x6, 0x3, 0x2, 0x4, 0x6}, @call={0x85, 0x0, 0x0, 0x7a}], &(0x7f0000000000)='GPL\x00', 0x1195, 0x85, &(0x7f0000000240)=""/133, 0x41100, 0x0, [], 0x0, 0xe, r3, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x6, 0x8001}, 0x10, 0x0, r4}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f0000000440)={0x1, 0x4}, 0x0, 0x0, &(0x7f0000000480)={0x0, 0xb, 0x0, 0x8}, &(0x7f00000004c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x2}}, 0x10) [ 406.566320][ T28] audit: type=1804 audit(1591942694.650:377): pid=18441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/236/cgroup.controllers" dev="sda1" ino=16243 res=1 06:18:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfdef) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x60000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x111}, 0x8) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000004}, 0x2f) 06:18:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f00ff00}, 0x2f) 06:18:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000200)={0x87, @local, 0x4e24, 0x3, 'lc\x00', 0x42, 0x3, 0x4a}, 0x2c) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@local, @multicast1, @empty}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x7, {{0x2, 0x4e24, @local}}}, 0x88) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1406, 0x4, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48891}, 0x2000000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) socket$can_j1939(0x1d, 0x2, 0x7) 06:18:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0xfc, @dev}], 0x10) 06:18:15 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000004) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 06:18:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0xac141418}, 0x2f) 06:18:15 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x60, 0x0, 0x917, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7f}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, [], 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x60}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xa3dc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000007e193169c058830000000000000000000108000a00000000000600020001000e14000014001f00"/95], 0x5c}}, 0x400c000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000640)=""/172, 0xac}], 0x3, &(0x7f0000000200)=""/210, 0xd2}, 0x9}, {{&(0x7f0000000740)=@ax25={{0x3, @rose}, [@bcast, @remote, @remote, @bcast, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1, &(0x7f0000000500)=""/29, 0x1d}, 0x7f}], 0x2, 0x2040, &(0x7f0000000380)={r4, r5+60000000}) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r7 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@nfc, &(0x7f0000000ac0)=0x80) bind$pptp(r7, &(0x7f0000000b00)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 407.412738][T18481] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:18:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0xf) [ 407.468913][T18484] FAULT_INJECTION: forcing a failure. [ 407.468913][T18484] name failslab, interval 1, probability 0, space 0, times 0 [ 407.500242][T18481] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 407.503882][T18484] CPU: 1 PID: 18484 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 06:18:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) socket$inet_tcp(0x2, 0x1, 0x0) [ 407.517909][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.527977][T18484] Call Trace: [ 407.531288][T18484] dump_stack+0x188/0x20d [ 407.535641][T18484] should_fail.cold+0x5/0xa [ 407.540153][T18484] ? fault_create_debugfs_attr+0x140/0x140 [ 407.545971][T18484] ? __mutex_lock+0x460/0x13c0 [ 407.550744][T18484] ? sock_recvmsg+0xca/0x110 [ 407.555342][T18484] ? ____sys_recvmsg+0x208/0x580 [ 407.560288][T18484] ? __sys_recvmsg+0xe2/0x1a0 [ 407.564971][T18484] should_failslab+0x5/0xf [ 407.569417][T18484] kmem_cache_alloc_node+0x55/0x760 [ 407.574623][T18484] ? mutex_trylock+0x2c0/0x2c0 [ 407.579398][T18484] ? debug_check_no_obj_freed+0x213/0x449 [ 407.585133][T18484] __alloc_skb+0xba/0x5a0 [ 407.589471][T18484] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 407.595121][T18484] ? trace_hardirqs_off+0x50/0x220 [ 407.601434][T18484] netlink_dump+0x2e9/0xf50 [ 407.605985][T18484] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 407.611977][T18484] ? __netlink_sendskb+0xb0/0xb0 [ 407.616932][T18484] ? kfree_skbmem+0xef/0x1b0 [ 407.621532][T18484] ? consume_skb+0xfb/0x400 [ 407.626069][T18484] netlink_recvmsg+0xb2c/0xee0 [ 407.630849][T18484] ? netlink_dump+0xf50/0xf50 [ 407.635540][T18484] ? aa_af_perm+0x260/0x260 [ 407.640661][T18484] ? __might_fault+0x190/0x1d0 [ 407.645438][T18484] ? rw_copy_check_uvector+0x2cd/0x390 [ 407.650977][T18484] ? security_socket_recvmsg+0x8e/0xc0 [ 407.656456][T18484] ? netlink_dump+0xf50/0xf50 [ 407.661142][T18484] sock_recvmsg+0xca/0x110 [ 407.665572][T18484] ____sys_recvmsg+0x208/0x580 [ 407.670357][T18484] ? kernel_recvmsg+0x80/0x80 [ 407.675044][T18484] ? find_held_lock+0x2d/0x110 [ 407.679819][T18484] ? __fget_files+0x30d/0x500 [ 407.684510][T18484] ? debug_smp_processor_id+0x2f/0x185 [ 407.690067][T18484] ? lock_downgrade+0x840/0x840 [ 407.694939][T18484] ___sys_recvmsg+0xe4/0x150 [ 407.699632][T18484] ? recvmsg_copy_msghdr+0x80/0x80 [ 407.704753][T18484] ? __fget_files+0x32f/0x500 [ 407.709445][T18484] ? ksys_dup3+0x3c0/0x3c0 [ 407.713870][T18484] ? debug_smp_processor_id+0x2f/0x185 [ 407.719341][T18484] ? __fget_light+0x20e/0x270 [ 407.724042][T18484] __sys_recvmsg+0xe2/0x1a0 [ 407.728556][T18484] ? __sys_recvmsg_sock+0xc0/0xc0 [ 407.733588][T18484] ? vfs_write+0x161/0x5d0 [ 407.738054][T18484] ? do_syscall_64+0x21/0x7d0 [ 407.742750][T18484] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 407.748746][T18484] do_syscall_64+0xf6/0x7d0 [ 407.753262][T18484] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 407.759159][T18484] RIP: 0033:0x45ca69 [ 407.763061][T18484] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.783106][T18484] RSP: 002b:00007f188bbf3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 407.791528][T18484] RAX: ffffffffffffffda RBX: 00000000004fc080 RCX: 000000000045ca69 [ 407.799512][T18484] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 407.807493][T18484] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 407.815471][T18484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 407.823454][T18484] R13: 00000000000008ba R14: 00000000004cb985 R15: 00007f188bbf46d4 06:18:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) r3 = openat$cgroup_ro(r2, &(0x7f0000000a00)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000a40)={0x3, 0x7}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2000016f) 06:18:16 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x80, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000200)=0x28) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000015c0), &(0x7f0000000280)=0x4) [ 408.154027][T18515] FAULT_INJECTION: forcing a failure. [ 408.154027][T18515] name failslab, interval 1, probability 0, space 0, times 0 [ 408.193139][T18515] CPU: 1 PID: 18515 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 408.201598][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.211669][T18515] Call Trace: [ 408.214981][T18515] dump_stack+0x188/0x20d [ 408.219326][T18515] should_fail.cold+0x5/0xa [ 408.223841][T18515] ? fault_create_debugfs_attr+0x140/0x140 [ 408.229743][T18515] ? skb_release_data+0x42e/0x8b0 [ 408.234818][T18515] ? debug_smp_processor_id+0x2f/0x185 [ 408.240292][T18515] should_failslab+0x5/0xf [ 408.244716][T18515] kmem_cache_alloc_node_trace+0x59/0x790 [ 408.250449][T18515] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 408.256450][T18515] __kmalloc_node_track_caller+0x38/0x60 [ 408.262102][T18515] __kmalloc_reserve.isra.0+0x39/0xe0 [ 408.267490][T18515] __alloc_skb+0xef/0x5a0 [ 408.271831][T18515] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 408.277390][T18515] ? trace_hardirqs_off+0x50/0x220 [ 408.282523][T18515] netlink_dump+0x2e9/0xf50 [ 408.287039][T18515] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 408.293199][T18515] ? __netlink_sendskb+0xb0/0xb0 [ 408.294737][ T28] audit: type=1804 audit(1591942696.370:378): pid=18491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/237/cgroup.controllers" dev="sda1" ino=16322 res=1 [ 408.298150][T18515] ? kfree_skbmem+0xef/0x1b0 [ 408.326926][T18515] ? consume_skb+0xfb/0x400 [ 408.331433][T18515] netlink_recvmsg+0xb2c/0xee0 [ 408.336223][T18515] ? netlink_dump+0xf50/0xf50 [ 408.340914][T18515] ? aa_af_perm+0x260/0x260 [ 408.345509][T18515] ? __might_fault+0x190/0x1d0 [ 408.350268][T18515] ? rw_copy_check_uvector+0x2cd/0x390 [ 408.355821][T18515] ? security_socket_recvmsg+0x8e/0xc0 [ 408.361311][T18515] ? netlink_dump+0xf50/0xf50 [ 408.365991][T18515] sock_recvmsg+0xca/0x110 [ 408.370411][T18515] ____sys_recvmsg+0x208/0x580 [ 408.375179][T18515] ? kernel_recvmsg+0x80/0x80 [ 408.379455][ T28] audit: type=1804 audit(1591942696.370:379): pid=18494 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/237/cgroup.controllers" dev="sda1" ino=16322 res=1 [ 408.379863][T18515] ? find_held_lock+0x2d/0x110 [ 408.408288][T18515] ? __fget_files+0x30d/0x500 [ 408.412983][T18515] ? debug_smp_processor_id+0x2f/0x185 [ 408.418458][T18515] ? lock_downgrade+0x840/0x840 [ 408.423334][T18515] ___sys_recvmsg+0xe4/0x150 [ 408.427940][T18515] ? recvmsg_copy_msghdr+0x80/0x80 [ 408.433057][T18515] ? __fget_files+0x32f/0x500 [ 408.437751][T18515] ? ksys_dup3+0x3c0/0x3c0 [ 408.442176][T18515] ? debug_smp_processor_id+0x2f/0x185 [ 408.447699][T18515] ? __fget_light+0x20e/0x270 [ 408.452391][T18515] __sys_recvmsg+0xe2/0x1a0 [ 408.456900][T18515] ? __sys_recvmsg_sock+0xc0/0xc0 [ 408.461933][T18515] ? vfs_write+0x161/0x5d0 [ 408.466374][T18515] ? do_syscall_64+0x21/0x7d0 [ 408.471117][T18515] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 408.477111][T18515] do_syscall_64+0xf6/0x7d0 [ 408.481624][T18515] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 408.487547][T18515] RIP: 0033:0x45ca69 [ 408.491444][T18515] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.511159][T18515] RSP: 002b:00007f188bbf3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 408.520452][T18515] RAX: ffffffffffffffda RBX: 00000000004fc080 RCX: 000000000045ca69 [ 408.528430][T18515] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 408.536434][T18515] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 408.544429][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 408.552424][T18515] R13: 00000000000008ba R14: 00000000004cb985 R15: 00007f188bbf46d4 06:18:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x12c, @dev}], 0x10) [ 408.662939][ T28] audit: type=1804 audit(1591942696.740:380): pid=18523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/237/cgroup.controllers" dev="sda1" ino=16322 res=1 06:18:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x3e7) 06:18:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:16 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000), 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000340)="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", 0x126, 0x200448d0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c000008624b840c2168233697e674b896609ca665e22781cde03f7d043c59efb9c8a00282a97af71bf9aede6b33b2994be621ee882b41aadbc62193e48f5c0466dc19cd333d859d1eb7670d5522673d8456309db389d3132a88c68e00d52644d2af1a7c68344eeb487b647dc1531d4779e2e30fbd4596275914a41f0b030429987d99d6bd7e698a8a2af3785325cdce", @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000b000300000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x4000}, {r2, 0x4080}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x9]}, 0x8) [ 408.894653][T18544] FAULT_INJECTION: forcing a failure. [ 408.894653][T18544] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 408.907899][T18544] CPU: 1 PID: 18544 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 408.916323][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.922845][ T28] audit: type=1804 audit(1591942697.000:381): pid=18543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/238/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 408.926376][T18544] Call Trace: [ 408.926400][T18544] dump_stack+0x188/0x20d [ 408.926422][T18544] should_fail.cold+0x5/0xa [ 408.926441][T18544] ? fault_create_debugfs_attr+0x140/0x140 [ 408.926459][T18544] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 408.926472][T18544] ? kmem_cache_alloc_node+0x13c/0x760 [ 408.926485][T18544] ? __alloc_skb+0xba/0x5a0 [ 408.926503][T18544] ? netlink_dump+0x2e9/0xf50 [ 408.989114][T18544] ? netlink_recvmsg+0xb2c/0xee0 [ 408.994236][T18544] ? sock_recvmsg+0xca/0x110 [ 408.998854][T18544] ? ____sys_recvmsg+0x208/0x580 [ 409.003800][T18544] ? ___sys_recvmsg+0xe4/0x150 [ 409.008642][T18544] __alloc_pages_nodemask+0x17a/0x810 [ 409.015337][T18544] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 409.022112][T18544] ? lock_acquire+0x1f2/0x8f0 [ 409.026798][T18544] ? netlink_dump+0xd4/0xf50 [ 409.031402][T18544] ? mark_lock+0x11f/0xdd0 [ 409.035887][T18544] ? stack_trace_consume_entry+0x160/0x160 [ 409.041707][T18544] cache_grow_begin+0x8c/0xc10 [ 409.046484][T18544] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 409.052040][T18544] kmem_cache_alloc_node_trace+0x6c3/0x790 [ 409.057898][T18544] __kmalloc_node_track_caller+0x38/0x60 [ 409.063545][T18544] __kmalloc_reserve.isra.0+0x39/0xe0 [ 409.068966][T18544] __alloc_skb+0xef/0x5a0 [ 409.073307][T18544] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 409.078880][T18544] ? trace_hardirqs_off+0x50/0x220 [ 409.084003][T18544] netlink_dump+0x2e9/0xf50 [ 409.088519][T18544] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 409.094661][T18544] ? __netlink_sendskb+0xb0/0xb0 [ 409.099613][T18544] ? kfree_skbmem+0xef/0x1b0 [ 409.104223][T18544] ? consume_skb+0xfb/0x400 [ 409.108733][T18544] netlink_recvmsg+0xb2c/0xee0 [ 409.113508][T18544] ? netlink_dump+0xf50/0xf50 [ 409.118196][T18544] ? aa_af_perm+0x260/0x260 [ 409.122707][T18544] ? __might_fault+0x190/0x1d0 [ 409.127476][T18544] ? rw_copy_check_uvector+0x2cd/0x390 [ 409.132946][T18544] ? security_socket_recvmsg+0x8e/0xc0 [ 409.138410][T18544] ? netlink_dump+0xf50/0xf50 [ 409.143092][T18544] sock_recvmsg+0xca/0x110 [ 409.147519][T18544] ____sys_recvmsg+0x208/0x580 [ 409.152310][T18544] ? kernel_recvmsg+0x80/0x80 [ 409.156997][T18544] ? find_held_lock+0x2d/0x110 [ 409.161779][T18544] ? __fget_files+0x30d/0x500 [ 409.166472][T18544] ? debug_smp_processor_id+0x2f/0x185 [ 409.171942][T18544] ? lock_downgrade+0x840/0x840 [ 409.176808][T18544] ___sys_recvmsg+0xe4/0x150 [ 409.181409][T18544] ? recvmsg_copy_msghdr+0x80/0x80 [ 409.186522][T18544] ? __fget_files+0x32f/0x500 [ 409.191212][T18544] ? ksys_dup3+0x3c0/0x3c0 [ 409.195651][T18544] ? debug_smp_processor_id+0x2f/0x185 [ 409.201121][T18544] ? __fget_light+0x20e/0x270 [ 409.205814][T18544] __sys_recvmsg+0xe2/0x1a0 [ 409.210324][T18544] ? __sys_recvmsg_sock+0xc0/0xc0 [ 409.215350][T18544] ? vfs_write+0x161/0x5d0 [ 409.219788][T18544] ? do_syscall_64+0x21/0x7d0 [ 409.224472][T18544] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 409.230462][T18544] do_syscall_64+0xf6/0x7d0 [ 409.234975][T18544] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 409.240866][T18544] RIP: 0033:0x45ca69 [ 409.244768][T18544] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.264375][T18544] RSP: 002b:00007f188bbd2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 409.272812][T18544] RAX: ffffffffffffffda RBX: 00000000004fc080 RCX: 000000000045ca69 [ 409.280826][T18544] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 06:18:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000240)={0xfffffffffffffff8, 0x53dc, 0x8, 0x9, 0x5, 0xfffffffffffffff7, 0x6, 0x857}, &(0x7f0000000180)={0x9, 0x8, 0x9, 0xa7, 0xfffffffb, 0x7, 0x100000001, 0x4}, &(0x7f00000001c0)={0x210, 0x1, 0x7410, 0xff86, 0x8, 0xfff, 0x10000008001, 0x8}, &(0x7f0000000200)={0x77359400}) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 409.288807][T18544] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 409.296787][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 409.304799][T18544] R13: 00000000000008ba R14: 00000000004cb985 R15: 00007f188bbd36d4 06:18:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016170a00", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10200}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000001) [ 409.393068][T18544] validate_nla: 19 callbacks suppressed [ 409.393077][T18544] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$NFNL_MSG_CTHELPER_GET(r3, 0x0, 0x40) 06:18:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80080) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) 06:18:17 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x300, @dev}], 0x10) [ 409.636137][ T28] audit: type=1804 audit(1591942697.720:382): pid=18569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/239/cgroup.controllers" dev="sda1" ino=16257 res=1 [ 409.666350][T18579] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0xfffffffc}, 0xfffffffffffffe41) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 409.686294][T18579] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) socket$l2tp6(0xa, 0x2, 0x73) [ 409.732717][T18573] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 409.763361][T18582] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 409.780079][T18582] FAULT_INJECTION: forcing a failure. [ 409.780079][T18582] name failslab, interval 1, probability 0, space 0, times 0 [ 409.832146][T18582] CPU: 0 PID: 18582 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 409.840499][T18582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.850561][T18582] Call Trace: [ 409.853866][T18582] dump_stack+0x188/0x20d [ 409.858223][T18582] should_fail.cold+0x5/0xa [ 409.862740][T18582] ? fault_create_debugfs_attr+0x140/0x140 [ 409.868555][T18582] ? lock_acquire+0x1f2/0x8f0 [ 409.873243][T18582] ? netlink_deliver_tap+0x146/0xb50 [ 409.878536][T18582] should_failslab+0x5/0xf [ 409.882937][T18582] kmem_cache_alloc+0x44/0x740 [ 409.887687][T18582] ? lock_downgrade+0x840/0x840 [ 409.892535][T18582] skb_clone+0x14d/0x3c0 [ 409.896761][T18582] netlink_deliver_tap+0x91c/0xb50 [ 409.901877][T18582] __netlink_sendskb+0x5b/0xb0 [ 409.906647][T18582] netlink_dump+0x700/0xf50 [ 409.911142][T18582] ? __netlink_sendskb+0xb0/0xb0 [ 409.916070][T18582] ? kfree_skbmem+0xef/0x1b0 [ 409.920662][T18582] ? consume_skb+0xfb/0x400 [ 409.925177][T18582] netlink_recvmsg+0xb2c/0xee0 [ 409.929941][T18582] ? netlink_dump+0xf50/0xf50 [ 409.934608][T18582] ? aa_af_perm+0x260/0x260 [ 409.939220][T18582] ? __might_fault+0x190/0x1d0 [ 409.943979][T18582] ? rw_copy_check_uvector+0x2cd/0x390 [ 409.949427][T18582] ? security_socket_recvmsg+0x8e/0xc0 [ 409.954873][T18582] ? netlink_dump+0xf50/0xf50 [ 409.959539][T18582] sock_recvmsg+0xca/0x110 [ 409.963942][T18582] ____sys_recvmsg+0x208/0x580 [ 409.968691][T18582] ? kernel_recvmsg+0x80/0x80 [ 409.973350][T18582] ? find_held_lock+0x2d/0x110 [ 409.978098][T18582] ? __fget_files+0x30d/0x500 [ 409.982770][T18582] ? debug_smp_processor_id+0x2f/0x185 [ 409.988210][T18582] ? lock_downgrade+0x840/0x840 [ 409.993057][T18582] ___sys_recvmsg+0xe4/0x150 [ 409.997630][T18582] ? recvmsg_copy_msghdr+0x80/0x80 [ 410.002719][T18582] ? __fget_files+0x32f/0x500 [ 410.007381][T18582] ? ksys_dup3+0x3c0/0x3c0 [ 410.011782][T18582] ? debug_smp_processor_id+0x2f/0x185 [ 410.017225][T18582] ? __fget_light+0x20e/0x270 [ 410.021898][T18582] __sys_recvmsg+0xe2/0x1a0 [ 410.026389][T18582] ? __sys_recvmsg_sock+0xc0/0xc0 [ 410.031404][T18582] ? vfs_write+0x161/0x5d0 [ 410.035812][T18582] ? do_syscall_64+0x21/0x7d0 [ 410.040481][T18582] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 410.046447][T18582] do_syscall_64+0xf6/0x7d0 [ 410.050936][T18582] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 410.056808][T18582] RIP: 0033:0x45ca69 [ 410.060685][T18582] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.080280][T18582] RSP: 002b:00007f188bbb1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 410.088685][T18582] RAX: ffffffffffffffda RBX: 00000000004fc080 RCX: 000000000045ca69 [ 410.096669][T18582] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 410.104623][T18582] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 410.112578][T18582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 410.120541][T18582] R13: 00000000000008ba R14: 00000000004cb985 R15: 00007f188bbb26d4 06:18:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)={r3, 0x0, 0x20}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x7f}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010102}, 0x10) 06:18:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x3b) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x280}, {r3}], 0x2, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x200]}, 0x8) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 410.353031][ T28] audit: type=1804 audit(1591942698.430:383): pid=18576 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/239/cgroup.controllers" dev="sda1" ino=16257 res=1 06:18:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe21, @local}, 0x10) r1 = socket$inet(0x2, 0x0, 0x8000) pipe(&(0x7f0000000b00)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) setsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000180)="413efc0d28ff7e8fd052c7737a93a40943a64081ebfd7c79bb48cd41741afc298b564b19a0246c048c411028ede2e38d6034e072ed66f6420fd58dda55f517464fd1ee470a12c6a23d26b678cb62beba85da3efb7d13c41bdff8aa36c08aaebccdf9a9ef48d6e26bb710020001e45ce572f4b622fda981db355983b0311b973dca43fa5aa3d39f6f41573c156b1a1c5a5e2d85af0b5aebefe409425c1be3b276c40f28b392d00ed420a9cb05ffd9db551f87f90c658504230cd9db673de870e4250b1dc12c08deb7a8fcb617", 0xcc) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000b40)=0x63, 0x2) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x3e8, @dev}], 0x10) 06:18:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x11, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000)=0x8001, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4621, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x37, 0x8, 0x70bd28, 0x25dfdbfe, {0x17}, [@typed={0x8, 0x14, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000011) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000180)=0x4) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) bind$isdn(r4, &(0x7f0000000100)={0x22, 0x8, 0x27, 0x3, 0x3}, 0x6) sendfile(r3, r1, 0x0, 0x100000001) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x40, @empty, 0x5}, {0xa, 0x4e24, 0xe20, @private2={0xfc, 0x2, [], 0x1}, 0xfff}, 0x4, [0x8d5f, 0x9, 0x8000, 0x9, 0x6, 0x9969, 0x8, 0x6]}, 0x5c) 06:18:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)={r5, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r5, 0x7ff, 0x0, 0x0, 0x9773}, &(0x7f00000001c0)=0x18) ioctl(r1, 0xc6d, &(0x7f0000000000)="a8769eb1a9f61483d97f4c9fbd4e90b0f7d34f93e4a9abd6e4da1ffcbc871c") [ 410.843628][ T28] audit: type=1804 audit(1591942698.920:384): pid=18621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/240/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 410.848309][T18626] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 410.978621][T18626] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000001c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180)=0x8000, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0xfffffffffffffdb8) [ 411.022807][T18623] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 411.040220][T18628] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 06:18:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x4, 0x2, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000001c0)=0x6, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r2}) 06:18:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000200), &(0x7f0000000240)=0x10) 06:18:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 411.321750][T18649] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x2, 0x0}, 0x0) 06:18:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x5dc, @dev}], 0x10) [ 411.525803][ T28] audit: type=1804 audit(1591942699.610:385): pid=18662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/241/cgroup.controllers" dev="sda1" ino=15843 res=1 06:18:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x21, 0x4) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x8, 0xb, @private1, 0x800}, 0x1c) 06:18:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x3, 0x0}, 0x0) 06:18:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x180028}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x140d, 0x100, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20040051}, 0x4000011) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c000}, 0x4048010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 06:18:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x4, 0x0}, 0x0) 06:18:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000280)=0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0xa, 0x7) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10, 0x80800) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 412.022327][ T28] audit: type=1804 audit(1591942700.100:386): pid=18689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/242/cgroup.controllers" dev="sda1" ino=16380 res=1 06:18:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x5, 0x0}, 0x0) 06:18:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x80000003}, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x408040, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) bind(r6, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x5, 0x6, 0x8, 0x0, 0x0, [{{r0}, 0x2}, {{r2}, 0xfffffffffffffffc}, {{r3}, 0x7}, {{r4}, 0x100000001}, {{r0}, 0x4e2ae1bd}, {{r0}, 0x6}, {{r0}, 0x80}, {{r6}, 0x4}]}) 06:18:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x4, 0x5f0, [0x20000180, 0x0, 0x0, 0x200002de, 0x200005ba], 0x0, &(0x7f0000000000), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x12, 0x1a, 'dummy0\x00', 'macvtap0\x00', 'wg0\x00', 'rose0\x00', @random="9d4d7a5d35e2", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xbe, 0xf6, 0x12e, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'ftp-20000\x00'}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0xb7ff868e1e1d17c5, 0x3, 0xa01, 'netdevsim0\x00', 'virt_wifi0\x00', 'bridge_slave_0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="872fd1b66d51", [], 0xae, 0xf6, 0x12e, [@time={{'time\x00', 0x0, 0x18}, {{0x20, 0x0, 0x14cdd, 0x11c35, 0x0, 0x20, 0x1}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x9, 0x5}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {0x6, 0x11, 0x201, 'nr0\x00', 'ip6erspan0\x00', 'veth0_to_team\x00', 'veth1_to_bridge\x00', @broadcast, [], @random="55708952bb52", [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x10e, 0x146, 0x17e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'vcan0\x00', 'veth0_vlan\x00', 0x2, 0x3, 0x6, 0x2, 0x35c00, 0x800, {0x7}, {0xfff}}}}, @state={{'state\x00', 0x0, 0x8}, {{0x3ff}}}], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x11, 0x64, 0xa00, 'veth1\x00', 'vlan1\x00', 'veth1_macvtap\x00', 'syz_tun\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x627546052259622, 0x0, 0xff, 0xff], 0x6e, 0x11e, 0x156, [], [@snat={'snat\x00', 0x10, {{@dev={[], 0x29}, 0xffffffffffffffec}}}, @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x9, 0x8, 0x0, 0x0, "8a53b212ecafaf6a0a07ac8b814215292da55c84051784e583ad8d802a656025c978851a8f1d50f8373659742acaf1e0238851c1af7a16d0229ffc7b25f4cd8a"}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}]}, 0x668) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x600, @dev}], 0x10) 06:18:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x6, 0x0}, 0x0) 06:18:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000340)="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", 0x126, 0x200448d0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c000008624b840c2168233697e674b896609ca665e22781cde03f7d043c59efb9c8a00282a97af71bf9aede6b33b2994be621ee882b41aadbc62193e48f5c0466dc19cd333d859d1eb7670d5522673d8456309db389d3132a88c68e00d52644d2af1a7c68344eeb487b647dc1531d4779e2e30fbd4596275914a41f0b030429987d99d6bd7e698a8a2af3785325cdce", @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000b000300000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x4000}, {r2, 0x4080}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x9]}, 0x8) 06:18:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x4, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x20000040) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x338, r3, 0x402, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x82}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x810}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9416}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7a}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf535}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff09}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6266}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x148, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x494b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd15}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x1404c0d4}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) connect$caif(r6, &(0x7f0000000540), 0x18) 06:18:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x7, 0x0}, 0x0) 06:18:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 412.713144][T18734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:18:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x9, 0x0}, 0x0) 06:18:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x7, 0x0}, 0x0) 06:18:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = accept(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000000)=0x80) getsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/248, 0xf8}, {&(0x7f0000001480)=""/145, 0x91}, {&(0x7f0000001540)=""/191, 0xbf}, {&(0x7f0000001600)=""/217, 0xd9}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000002880)=""/75, 0x4b}], 0x8, &(0x7f0000000180)=""/61, 0x3d}, 0x100}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/99, 0x63}, {&(0x7f0000002a80)=""/111, 0x6f}, {&(0x7f0000001700)=""/30, 0x1e}, {&(0x7f0000002b00)=""/67, 0x43}], 0x4, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x3f}, {{&(0x7f0000003bc0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/32, 0x20}], 0x1, &(0x7f0000003cc0)=""/7, 0x7}}, {{&(0x7f0000003d00)=@sco, 0x80, &(0x7f0000004200)=[{&(0x7f0000003d80)=""/17, 0x11}, {&(0x7f0000003dc0)=""/170, 0xaa}, {&(0x7f0000003e80)=""/173, 0xad}, {&(0x7f0000003f40)=""/177, 0xb1}, {&(0x7f0000004000)=""/206, 0xce}, {&(0x7f0000004100)=""/129, 0x81}, {&(0x7f00000041c0)=""/61, 0x3d}], 0x7, &(0x7f0000004280)=""/104, 0x68}, 0x1}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004300)=""/76, 0x4c}, {&(0x7f0000004380)=""/209, 0xd1}, {&(0x7f0000004480)=""/202, 0xca}], 0x3, &(0x7f00000045c0)=""/73, 0x49}, 0x2}, {{&(0x7f0000004640)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004c00)=[{&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/194, 0xc2}, {&(0x7f00000048c0)=""/16, 0x10}, {&(0x7f0000004900)=""/248, 0xf8}, {&(0x7f0000004a00)=""/101, 0x65}, {&(0x7f0000004a80)=""/224, 0xe0}, {&(0x7f0000004b80)=""/106, 0x6a}], 0x7, &(0x7f0000004c80)=""/207, 0xcf}, 0x6}], 0x6, 0x10000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) socketpair(0xf, 0x2, 0x3, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900f3003c000380020076657468300000000000000000ad8125f6035cee9f8cea6826b22de40000000800bfb323e26f30f7dac4a4030000000000140006000100"/84], 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) [ 413.308929][T18760] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.333534][T18762] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 06:18:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x700, @dev}], 0x10) 06:18:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 06:18:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xa, 0x0}, 0x0) 06:18:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r2, &(0x7f0000000180)="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", 0x1000, 0x81, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) 06:18:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:21 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r0, @ANYBLOB="ff830a00000016170a00", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc011) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r5, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe882}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4040044) r7 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xc, 0x0}, 0x0) 06:18:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) r3 = accept$nfc_llcp(r2, 0x0, &(0x7f00000000c0)) connect$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x6, 0x9, 0x1, "2abcce6b0bbe9f37e4dd6bcae7723a19f31aa10524cce10c6109656f052dfabf5357ec0f20dd99de6e0427abd70eb98bf826ce09eca72f033eefc668715665", 0x2}, 0x60) [ 413.665566][T18782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:18:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xe, 0x0}, 0x0) 06:18:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x5, 0x401, 0x0, 0x8b}, 0x8) 06:18:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@nl=@unspec, &(0x7f0000000000)=0x80, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x125, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x900, @dev}], 0x10) 06:18:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 06:18:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x10, 0x0}, 0x0) 06:18:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "9dfa8e92c042dca7", "229a5e50fd4f3915a6787f76e3adc032bd293a4ba24dc6ec95506c34a3c23a01", "71c9b428", "30050e3a187024ac"}, 0x38) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x4, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x4, 0xfffffffd) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r4, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="550c0fc2", @ANYRES16=r4, @ANYBLOB="00022abd7000fddbdf25190000000800010003000000080001000000000008000100040000000c0099000100000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20049884}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r8, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2d5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2b9}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) [ 414.493913][T18826] validate_nla: 80 callbacks suppressed [ 414.493924][T18826] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 414.563271][T18826] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 414.599957][T18819] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 414.613637][T18828] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 414.630464][T18826] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 414.652042][T18826] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x48, 0x0}, 0x0) 06:18:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 414.915776][T18843] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 414.935145][T18843] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 414.943963][T18841] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r4, 0x0, 0x10040}}, 0x20}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e8e5756dc4a38204"}, 0x10}, 0x1, 0x0, 0x0, 0x40084}, 0x4044040) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000380)=@v2={0x2, @adiantum, 0x0, [], "9bbf4c2648e867b9665d3cccce9a669e"}) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socketpair(0x8, 0x1, 0x1, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c8014}, 0x848) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}]}]}, 0x50}}, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffc0}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 06:18:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0xd2f) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x0, 0x0) accept4$netrom(r2, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @default, @netrom, @bcast, @default, @remote, @remote, @bcast]}, &(0x7f0000000000)=0x48, 0x800) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 414.985604][T18848] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0xa00, @dev}], 0x10) 06:18:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x48, 0x0}, 0x0) 06:18:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x4c, 0x0}, 0x0) 06:18:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r8}}, 0x20}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r8, 0x3, {0x1}, 0xff}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="c76225aaff656f03a00319433bdfd0d9fd076ba343ab14709b0823b7a749e2a9fd1485d2921341ac2ef53de9116d65f4d56b9745b3146b06709cdbb7153b36efeb1b8e7f2189bf60976446533463f393c5a92c7a1c582476e7c4112985d5c633c198825e0a73c897d6767ffe32392c0620f4025391ffc293270536e56ddba8beaca1c2d47c60abe379a853ecc3392ded3abf16d4ff5c9886db4762203fb08927c27965bc5c3ffd471970a9ca32552965bbc51115e519f865cc2e4b6fa87e0ae363d4", 0xc2}, 0x1, 0x0, 0x0, 0x40010}, 0x4000804) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) [ 415.531118][T18871] bridge5: port 1(bond0) entered blocking state [ 415.552965][T18871] bridge5: port 1(bond0) entered disabled state [ 415.562477][T18871] device bond0 entered promiscuous mode [ 415.573459][T18871] device bond_slave_0 entered promiscuous mode 06:18:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'macvlan0\x00', {}, 0xfff7}) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "1fbf9f86bb5273a324db4118cc4e791e3c2a95055454a2310bc5ed8690d2f8ff4e06cad7fdff4058a6c44912251d2f90c4caa8332cc735acd25317bc6b9cd4ee1a28c4cd20e7372ac8e7043c"}, 0x50) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close(r2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000200)={{0x2c, @loopback, 0x4e24, 0x3, 'wlc\x00', 0x14, 0x3, 0x54}, {@multicast2, 0x4e20, 0x3, 0x7f, 0x2, 0x5}}, 0x44) [ 415.583230][T18871] device bond_slave_1 entered promiscuous mode [ 415.603570][T18879] device bond0 left promiscuous mode [ 415.611767][T18879] device bond_slave_0 left promiscuous mode [ 415.631138][T18879] device bond_slave_1 left promiscuous mode [ 415.642482][T18879] bridge5: port 1(bond0) entered disabled state 06:18:23 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xa, 0x0}, 0x0) 06:18:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x60, 0x0}, 0x0) 06:18:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x5, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r2, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x4, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x104, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @rand_addr=0x64010100}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x196a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x104}}, 0x28000000) 06:18:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r8}}, 0x20}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r8, 0x3, {0x1}, 0xff}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="c76225aaff656f03a00319433bdfd0d9fd076ba343ab14709b0823b7a749e2a9fd1485d2921341ac2ef53de9116d65f4d56b9745b3146b06709cdbb7153b36efeb1b8e7f2189bf60976446533463f393c5a92c7a1c582476e7c4112985d5c633c198825e0a73c897d6767ffe32392c0620f4025391ffc293270536e56ddba8beaca1c2d47c60abe379a853ecc3392ded3abf16d4ff5c9886db4762203fb08927c27965bc5c3ffd471970a9ca32552965bbc51115e519f865cc2e4b6fa87e0ae363d4", 0xc2}, 0x1, 0x0, 0x0, 0x40010}, 0x4000804) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0xe00, @dev}], 0x10) 06:18:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x68, 0x0}, 0x0) 06:18:24 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) 06:18:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x1c, &(0x7f00000001c0)=0x74861b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4a27, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$FIONCLEX(r0, 0x5450) r2 = socket$inet(0x2, 0x1, 0x8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 416.239872][T18911] bridge24: port 1(bond0) entered blocking state [ 416.251619][T18911] bridge24: port 1(bond0) entered disabled state [ 416.278100][T18911] device bond0 entered promiscuous mode [ 416.299891][T18911] device bond_slave_0 entered promiscuous mode [ 416.319307][T18911] device bond_slave_1 entered promiscuous mode [ 416.338682][T18918] device bond0 left promiscuous mode [ 416.347806][T18918] device bond_slave_0 left promiscuous mode 06:18:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) getsockname(r1, &(0x7f0000000180)=@alg, &(0x7f0000000000)=0x80) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 416.382158][T18918] device bond_slave_1 left promiscuous mode [ 416.400353][T18918] bridge24: port 1(bond0) entered disabled state 06:18:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x1, 0x4) socketpair(0x5, 0x80000, 0x8, &(0x7f00000001c0)={0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000040)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0xfffffffffffffe9f) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2}, &(0x7f0000000180)=0xc) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x6c, 0x0}, 0x0) 06:18:24 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r1 = accept(r0, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000200)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000680)=0x11, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x108, r2, 0x1, 0x70bd28, 0x800, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a3b}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x200008d4}, 0xc0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0xf47abe75c3b43c56}, 0x40000) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0)=0x8, 0x4) [ 416.866053][T18955] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.935700][T18958] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 06:18:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) ioctl$FITHAW(r3, 0xc0045878) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@private1, @remote, [0xffffffff, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'wg0\x00', 'vlan1\x00', {0xff}, {0xc0fd27b3f0106957}, 0x16, 0x0, 0x2, 0x9}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x3, 0x7}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x4, 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="fd9065f9564174", 0x7}, {&(0x7f0000000140)="bffbfff3bc86dd", 0x16c7}], 0x2) 06:18:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x74, 0x0}, 0x0) 06:18:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x2000, @dev}], 0x10) 06:18:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x7a, 0x0}, 0x0) 06:18:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x20010, r1, 0x65c53000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000004060103970ae5a3eaffffffffffffff0500010007"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000002) 06:18:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x300, 0x0}, 0x0) 06:18:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x73) bind(r2, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) getsockname(r2, &(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000001440)=0x80) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001480)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000300)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, 0x1409, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'batadv_slave_1\x00'}, 0x496e}) r6 = socket$inet(0x2, 0x80001, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x500, 0x0}, 0x0) 06:18:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) ioctl$sock_ifreq(r1, 0x8911, &(0x7f00000002c0)={'lo\x00', @ifru_flags=0x100}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/245, 0xf5}, &(0x7f0000000000), 0x6}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000002300), &(0x7f0000002340)=0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000140)={r6, 0x0, 0x20}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r6, 0x4}, 0x8) 06:18:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x600, 0x0}, 0x0) 06:18:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x2c01, @dev}], 0x10) 06:18:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0xff85) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) connect$phonet_pipe(r2, &(0x7f0000000100)={0x23, 0x0, 0x15, 0xff}, 0x10) 06:18:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) r2 = accept4$llc(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x80000) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000004c0)={0x0, 0x1, 0x7e, 0x1, 0x3f, 0x7fff}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x0, 0xc1, 0x81, 0x5, 0x3, 0x3e, 0xf9, 0x1a3, 0x40, 0x2ba, 0x400, 0x0, 0x38, 0x2, 0x100, 0x8, 0x3ff}, [{0x3, 0x9300000, 0x8, 0x400, 0xbfdb, 0x9, 0x2, 0xe9b5}], "796bfc378a3f5538a02770081cced4f959d356eb7725326db0179c94fa1907222be38612fcfc2322979ee2a68729e75daf981cb15c611409cdac5c6bd6893dca8f2a65f4fda1ade860b6a0e344515b2e424e49ce52321f3b0ce2171816bf57e81feb1649e995ec831f0669debbbde5f26a3d2c6e00351316a58687d9d0b4bc0b815f7866a6688790cdc5028797346bb44ce4d929b9c1e35f91b4f02872dfe6d2ee0c2ed748568b6dd588bc84d91831969e614286d773a554fd30201533c786986e", [[], []]}, 0x339) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 418.280390][ T28] audit: type=1804 audit(1591942706.360:387): pid=18997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/251/cgroup.controllers" dev="sda1" ino=15747 res=1 [ 418.388733][ T28] audit: type=1804 audit(1591942706.390:388): pid=18999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/251/cgroup.controllers" dev="sda1" ino=15747 res=1 06:18:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012060000010004000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000580db00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r5], 0x24}}, 0x0) 06:18:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x700, 0x0}, 0x0) 06:18:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 418.611899][ T28] audit: type=1804 audit(1591942706.690:389): pid=19035 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir599089010/syzkaller.yQLGpU/251/cgroup.controllers" dev="sda1" ino=15747 res=1 06:18:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x900, 0x0}, 0x0) [ 418.805804][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.853637][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.892549][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:18:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000240007050000000000000b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f000000000c0002000d6a716ef91b1d1dc9e791f4c8ce745cb96af7880f058f6a117a9f9a0639b6"], 0x48}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r5, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) close(r5) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback}, &(0x7f0000000440)=0xc) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="79dd08c50116"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4014000) 06:18:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xa00, 0x0}, 0x0) [ 419.087944][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 06:18:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x3f00, @dev}], 0x10) 06:18:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xc00, 0x0}, 0x0) 06:18:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x6, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) accept$inet6(r3, &(0x7f0000003c00), &(0x7f0000003c40)=0x1c) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000100)={r1, 0x800, 0x20, 0x400, 0xfffffffffffffffd}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x72, &(0x7f0000000080)={r5, 0x40, 0x0, 0x2, 0x8000000000000}, &(0x7f00000000c0)=0x30) 06:18:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bind(r3, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r4 = socket$kcm(0xa, 0x2, 0x73) bind(r4, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000000)="f3ae4e1c34cafbff74f8e050e6a55f756e27f6", 0x13}, {&(0x7f0000000200)="ceaa68bef23f5c2f7ab0fdd5c66dde935f4a4aaf7395ad63c2f8c1650266a51945bc8e06368c19026d9f4ca981bb31cf680686b9", 0x34}], 0x2, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r1, r5, r7]}}], 0x70}, 0x4000011) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000000700)={0x1b8, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{0xffffff33}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x2, 0x7, 0x3e, 0x3}, {0x3, 0x7f, 0x1, 0x7}, {0x5, 0xa5, 0x8, 0x3}, {0x2, 0x5, 0x98, 0x5}, {0xfc00, 0x5, 0x7, 0x5}, {0x9, 0x62, 0xae, 0xfffffffc}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) [ 419.521177][T19082] validate_nla: 94 callbacks suppressed [ 419.521186][T19082] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 419.586754][T19082] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 419.606926][T19077] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 419.618907][T19084] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 419.632808][T19082] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 419.650932][T19082] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)={r5, 0x0, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r5, 0x7, 0x20, 0x0, 0x1}, &(0x7f0000000180)=0x18) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) close(0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}], 0x1, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) 06:18:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xe00, 0x0}, 0x0) 06:18:28 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x880) ioctl$FS_IOC_GETFSLABEL(r1, 0x89a0, &(0x7f0000000000)) 06:18:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @remote}, &(0x7f0000000200)=0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='vlan0\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) close(r3) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000240)={{0x4b, @remote, 0x4e23, 0x2, 'nq\x00', 0x11, 0x3f, 0x45}, {@multicast2, 0x4e22, 0x3, 0x2, 0x200, 0x200}}, 0x44) [ 419.957922][T19109] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 419.985301][T19109] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 420.047952][T19106] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 420.107508][T19115] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:18:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4000, @dev}], 0x10) 06:18:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind(r1, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000001c0)=""/63, &(0x7f0000000200)=0x3f) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private=0x8010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r3, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) accept$inet(r3, &(0x7f0000000240), &(0x7f0000000180)=0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 06:18:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x2000, 0x0}, 0x0) 06:18:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000300)={@fixed={[], 0x12}, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016170a00", @ANYRES32=r5], 0x4}}, 0x0) getpeername(r2, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x80) sendfile(r3, r2, 0x0, 0x100000002) 06:18:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000a40)=0x180, 0xfffffffffffffe91) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x7d) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000180)=@ll={0x11, 0x15, r7, 0x1, 0x7, 0x6, @multicast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="ee31d90433146e46a43c180f1ff8ae9c20ad3a65a7670303eb293c045384d76aba629a967e54097411624cdb4dc35e5fe7e3dd0c6155339ecd8af3edfd8a8e0e218e1e2e53e9455532ce4ccf34af40631d7c64ffa3948a83a59336da55cb6d65ac95fba1d0279358be6fb6676e18440794e8532fcca5c23ca6a94c09428e4958e5bca267f15cb27db9cdde610d657baacba38a6789825aafe2342b3e649db687a84b198ea6aef822bcbdced8137094295778d6135635f9e94b3b4a022b7d3ada912812f20f52ed1a589a174509ef7668c339fb2f3714cff4e33996ea8fff75e901a55d832b8a3952c465599647a2cd400a5dba199d7f", 0xf6}], 0x1, &(0x7f0000000300)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="2792c4fc997b726d2da9a1bd386079181f1bf4465393aee0da927f1980809e73a0a31bc8e0edab00f8ebe4ba91bf0d55381d8e98213919be3effff840d868bf51302", 0x42}, {&(0x7f0000000400)="a55e1d0a15b479badd4e385cca3e2977af44691ac81101ee66861c245a746dd1922aeaf96037f43847f3d971ce9f147cb0322859d7cc2f85b0fe54dfe1bfa1bf8d28071e613ebfa9ef8c7bc9788e227daa3c0aa97523b3249b9b3d9c268633e79af1d474e8b80f6a018a1fd8f5e35c988484d1bdde90fcf5af96e99d64258684096f0d39e616847c0ad3e6546cd3cd442744809d487a7e4e5080bf4b82b328280e692b09715123ad6991465e1fc8590838829d1df37169d83707be200ae4b5b474c0a84b9cd18f4eda043c23c8e91acdb9322408172a1d2d52fb39", 0xdb}, {&(0x7f0000000500)="579ff6069f712f263451ed977b15f3bac2b7f78385172135ac34975bf7cd3777bfcf476b39797ba7c17afbb764f94617b39b7fe2762c2a0e6316db8b889e0331412d62d9806d6e4de86ba9c921b3a2af7ee1e3f576c647249653202ad1e6d323d3b34a3b261657625a3ea73f1d8332ca04f6f15b75d752117e22c76cf07b6c0c19a5223e73e5ff419119d03096df6d4d198ca6", 0x93}, {&(0x7f00000005c0)="e201fc16ffeadd4ea49ba6983f2ed0dbff6dd954da6c39508fc1d7033ed74e6f464b912e48ae5e4eddef2d7c275c6fbe02e53006f79b9a4df231ab", 0x3b}, {&(0x7f0000000600)="37031de2e54c04e16859b454c2435474cda04871ab446a601ab02f5dd2d00d0ed8ed548c48f81213ff6c5addb90fb1f3c90f97169f072ef759bc3911cca9635c6036b8d2f4745c4b5294b27292ee9e00a5dec1cd506af98144c5bb3101435db97cb361d4279c333edff7be43b02f0eec0f1fcde747c38ff3aaa4934a84d5db42b313ed88ce690a1c69c5ce6a8f6b8de4ee62aa01b555607663ee746b450ccd087a2616db6fe1ca9c531fc888a5a9540f668b8ccccc5b7100c8bab99684c8e98b593bf60030f79fec55f153", 0xcb}, {&(0x7f0000000700)="b691030873d639440ad95baceeb91757cb6888a7a72ff38a532f4b1a0f3081642c45f6b0ae06f580bac377d6dcff6dd8b93206e5e2b609cba13538c0d42619463db83f20bb2c4ce7d624b95e3d11ec47c72631ac3045665bdb53fd7fd6b5e1db401a48be03d80852ccf9676c3f2821e153319111891665f087ee43dc706239da128e66d187db7f5e06a2a9715d0c7aca713c1d984f2ba58771b8a14fa971e5750305041885f12301a07062a7", 0xac}, {&(0x7f00000007c0)="696233f52649eb1599bfc9013137eaea", 0x10}, {&(0x7f0000000800)="b4e33a21d9bb0086315c7f902186ef12fb0f9857364db158449a66343a8d780682f5ced7566b992e969a367b23258cca3c9199efe2a7e6fa9eccecfac3e7a26af9c889df6bd9c0c19ff7a1d2bc02a22d574a2c092a5a6fdbbf2fcfc16c6292f17edf0a016d9ac970b27ee4132672c0a11d48c22c29bdecaa3fe4e3", 0x7b}], 0x8, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x8691}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}}], 0x2, 0x0) r8 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) splice(r2, &(0x7f0000000180)=0x8, r0, &(0x7f00000001c0), 0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:28 executing program 5: unshare(0x40000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1e, 0x0, @mcast1, 0x40}, 0x1c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000300)=0xc) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x40}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{}, {@fixed}]}) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') 06:18:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x4000, 0x0}, 0x0) [ 420.569682][T19148] bridge5: port 1(bond0) entered blocking state [ 420.592246][T19148] bridge5: port 1(bond0) entered disabled state 06:18:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x10) [ 420.630835][T19148] device bond0 entered promiscuous mode [ 420.648856][T19148] device bond_slave_0 entered promiscuous mode [ 420.672116][T19148] device bond_slave_1 entered promiscuous mode [ 420.698361][T19155] device bond0 left promiscuous mode [ 420.704222][T19155] device bond_slave_0 left promiscuous mode [ 420.718840][T19160] IPVS: ftp: loaded support on port[0] = 21 [ 420.719418][T19155] device bond_slave_1 left promiscuous mode [ 420.732727][T19155] bridge5: port 1(bond0) entered disabled state 06:18:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netrom(r1, &(0x7f0000000180)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendmmsg$nfc_llcp(r2, &(0x7f0000000740)=[{&(0x7f00000002c0)={0x27, 0x1, 0x2, 0x7, 0x0, 0x1, "2e26232b2f73e754e659ca62c94d0344366e41d150877db9fb4697098dcc21e8deaf78e77cd2da9244a7416fcabca55f75275f37d10d24b8f52c2d630829b1", 0x16}, 0x60, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x40804}], 0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r4, 0x4000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000004fba00000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4f00, @dev}], 0x10) 06:18:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x4800, 0x0}, 0x0) 06:18:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe4f834a5345420c4, &(0x7f0000000040)=0x800000, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f00000001c0)=0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000000)=0x78) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x5, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x50) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0) 06:18:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 421.661168][T19160] IPVS: ftp: loaded support on port[0] = 21 06:18:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x507d, 0x0}, 0x0) 06:18:29 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @local, 0x64}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ee10010000010000007700000000000000ac0d43f7c4e5da9287764989016b899e50798bd62220ad2edd81b99c6660f7360644b3cdff2bb51bc92a5549d83e3ac62fabec9dca274608ba3e99090200411271cdcd51381a84c8054fd629964a4266a26346db01839a612fcc857031f450c0ee1fcc077da606d5f680a1925ca39e85e9"], 0x18}}], 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000006c0)={0x2081, {{0x2, 0x4e20, @broadcast}}}, 0x88) listen(r0, 0xfffffffffffffffe) r2 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="e8c4d564ac638dac5818b374c2ac5881c106c9e4114c23d60e8899dacb13e8fa9aae72414543e1c5b1b073e52cc6304528e3beb32e7fb6ba25a8def50a18f107c4b6642c18f684e53b37403ebd29a62d071ddc"], 0x1) r3 = socket$inet6(0xa, 0x80003, 0x29) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000005c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r5}) ioctl(r3, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r9 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r9, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2000000}, &(0x7f0000000340)=0xffffffffffffff7c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000380)={r10, 0x401, 0x4}, 0x8) getsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getpeername(r6, &(0x7f0000000080)=@hci, &(0x7f0000000240)=0x80) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newlink={0x9c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa67, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x9c}}, 0x480c4) 06:18:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000180)=0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082cbd7000ffdbdf250800000008000800ac1414bb08000c000000000014000600fe880000000000000000000000000001080004000300000008020000001e000106000b0002000000000000000200000014000500fe880000000000000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2bd8d94f85e9ea62) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81135840}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r3, 0x100, 0x70bd2a, 0x8, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x81, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x1c}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xf7\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x22000083}, 0x840) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010100}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) write$binfmt_misc(r5, &(0x7f0000000000)={'syz1'}, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) [ 422.037880][ T56] tipc: TX() has been purged, node left! 06:18:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x6000, @dev}], 0x10) 06:18:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) 06:18:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x5865, 0x0}, 0x0) 06:18:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) socketpair(0x9, 0x2, 0x7, &(0x7f0000000000)) socketpair(0xa, 0x80000, 0xffff691e, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000380)={0x2, 0xffff, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r1, &(0x7f0000000180)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) r2 = socket$inet(0x2, 0x80000, 0x8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800001a000000f7ffbfffffffffff0095000000000000006819ca22f61848dafda4c3a85af2da8199316304999ace97b62031a67a9b2a853d22465ceda8a600191564975ce013347a8fe6bb9e5093a4981ab60217ed9f6658ac32bb21c5276b384a8e99a70ff23d6203e162dfa17ee64dde6ed1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x48c, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2}, 0x2}, 0x6d) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000002000000000000000000000000000000000d00"/72], 0x48) 06:18:30 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @local, 0x64}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ee10010000010000007700000000000000ac0d43f7c4e5da9287764989016b899e50798bd62220ad2edd81b99c6660f7360644b3cdff2bb51bc92a5549d83e3ac62fabec9dca274608ba3e99090200411271cdcd51381a84c8054fd629964a4266a26346db01839a612fcc857031f450c0ee1fcc077da606d5f680a1925ca39e85e9"], 0x18}}], 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000006c0)={0x2081, {{0x2, 0x4e20, @broadcast}}}, 0x88) listen(r0, 0xfffffffffffffffe) r2 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="e8c4d564ac638dac5818b374c2ac5881c106c9e4114c23d60e8899dacb13e8fa9aae72414543e1c5b1b073e52cc6304528e3beb32e7fb6ba25a8def50a18f107c4b6642c18f684e53b37403ebd29a62d071ddc"], 0x1) r3 = socket$inet6(0xa, 0x80003, 0x29) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000005c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r5}) ioctl(r3, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r9 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r9, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2000000}, &(0x7f0000000340)=0xffffffffffffff7c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000380)={r10, 0x401, 0x4}, 0x8) getsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getpeername(r6, &(0x7f0000000080)=@hci, &(0x7f0000000240)=0x80) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newlink={0x9c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa67, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x9c}}, 0x480c4) 06:18:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x6000, 0x0}, 0x0) 06:18:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x3, 0xfffffffc) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) connect$ax25(r2, &(0x7f0000000240)={{0x3, @null, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) socketpair(0x15, 0x1, 0xffe, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x5, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x12ac}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4000) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x9, @loopback, 0x7f}}, 0x0, 0x0, 0x1d, 0x0, "9228ab6a2aaac805a437d7382a913f8dbb8ea32e6259baf953c9ed72445c29bbd468c26bb2f2eb38687a8354be2ba37c6f9b4ef85a4d75e950efc3fadf0a4c6463193207eb20908cab761a7fbb44962e"}, 0xd8) 06:18:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000300)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000440)=""/120, 0x78}], 0x5}, 0x42) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000500)={0x0, 0x5e, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r7, 0xc46dfc707e1df77d}, 0x14}, 0x1, 0x0, 0x0, 0x4044084}, 0x44004801) sendmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000002c40)=@caif=@dbg={0x25, 0x0, 0x1}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002cc0)="08f24a7a572141ff561db492e4ac5518ba693d2188d8c101a899073835d25dfd0a58ee5b52a6e506b75d03c6754a9befe1e72f12df011b71d101ce2c5ac5cf80b211217ce08551c82dec3d682a1968db37607bb1bfe805cccab3094c737a9510b86b2604da8d74d9d732fbdbaa42de1622a305057243c1cf8155a9508bbfb0a6999999798fc89f4eea5070ebc36f764c43f98c0e6384260934d4c929b71a1296da6f37bbc5a4a0fa7d01109781f11737b855", 0xb2}], 0x1, &(0x7f0000002dc0)=[{0x78, 0x114, 0x906, "606ced931288c62c6c274c6b14f9167d40e4a76ebe93d984f299dba06ba7376f36a330d24ba6ce79da2061e97e37be562b02ab2db327feeeed695144c1f52b3aca60ac621ffee0e9a715f4617a3d24d3c7b6c80b7c97ffb12746f61083f4e257d8b5"}, {0x78, 0x112, 0x8e58, "edf6c423bcec53d33533dc6126642160c0b435a0078afebf609374bfb03ab27746267245b3575f4d55ef7b11cb59ef8f5de6d8759e0f191d995bd015a682cdb705cd4545285f736d2559ab5be044c1ce53185aaa6819f6401fd68cb4da97bfea15ff51d749"}, {0x98, 0x3ee1d1a5b479c953, 0x200, "d17b07bf00d8800e35f2a351c46eb474383d21a0440ecb83a6a6e357574d6b110cbd19b40a60e047aa67156c59c19fc30d09d5ea007f8197db28c81f3755391020bf596382af2a0b3f65da062b1d2666ee14def24f33d3a1a252688e6b1c4bc3f3153b092b72bc2150233d566ab4a1468df51a2a302347842d1ec9206129b594c487"}, {0xa0, 0x100, 0x9, "cc3b5aa82016e930f84063637bb23f4521782609d8d5cb75b13dd590cb8637c2bfe28608f819f312636c721b2424764172b82dfcf29e47b4450a7513df399bd12a86c22cb1e6bf997646a92056ce2e2d13b1dbbb1357742a4ce0bd76339ba4464ac22cf1e1331a761c3a1bc56c7a9c5c348ca9e166f684a29f7699e346efc8a9203a52af3491640d8cca8c895aa9"}, {0x1010, 0x116, 0x1, "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"}, {0x98, 0x1, 0x60, "478eec607ccf789288d51f333b25ca72bf86b8a1320135ed8f678185768cfe9f53647c67d1a0702c645d07bc125ebc94d1633c1e10b249754f2b5846331fbaf5c58cde6ad98eda7f9eb192138b87a8f5afc4aeadd209a9663385c228bae28e6b7e9ded0f25f64d91ff5ca1f48fba78b2d412d6e37fb88ecce23a40946c99239966cdee7e"}, {0x38, 0x116, 0x4, "906f24a7e72d075d1008a3e78fc839cd93427b39f0bd1715f747d125d6f7f4311cd7175eac0040"}, {0x20, 0x29, 0x0, "396570121c147aca8a"}], 0x1328}}, {{&(0x7f0000004100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000005540)=[{&(0x7f0000004180)="4fa0706fde034ff804adc064898f1c5614692440", 0x14}, {&(0x7f00000041c0)="4d22566009afd24135ea3851fd428d75e97a11f34d7355e0688c3d9c2158baad2ad11cf58f4d6fcef89ebdd796d3db7a8ca828097a49df16d984a3477339fc61c281361960f873a8c4a9b6aee1fd45759989686e771d615816d7380ae47ad435c6", 0x61}, {&(0x7f0000004240)="34ded0add034168cef2e4dfe2d4aeb48ed9f3218dfc74472315f8135b7db88436113c90cbca4a6b6b9880d93feb98bd4cb3cb8a3e72025e43d4075b1f7911280ce3f81137762a053414cf8d02d89661fdd1667a2fd47a06e2cb77c203a6791ae79ea8e9a43a8c19b326ece02d69969a8d2fedec5fb02c7bc2b986d5014b20b9a52ec6cc308cec4c9de33ba04d5629e627235572e6557e772c3696e46d092db4ce9a497bcb3f32047361a1013c0eebe9f4d7883986dfc4362f138ce125d57eb5b73", 0xc1}, {&(0x7f0000004340)="b6908689066ac090c90ac359afda8f8ecbfb39e1b51e5cbed29bb49b27967573f5628e8f8f000f80a9506e96953070053099c9e9ea07c8b8351f4209a079534ee77d59bd81717874882ab89392d54efc112e3bd29e4deae2d090870958a0e8a7670b208ba5501977fa43baf31df0ee48aa6e36b94140310342c36739a6d5e61fd76de2", 0x83}, {&(0x7f0000004400)="cfe130957f22a6c48d1313d40494e2fbc5aba43f5f499e96a43484388835da", 0x1f}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="8b589ef8b9f2c9926f36b184aef966aab996a46c23fc88973c9b92c7c0bac8a3e60200ff1f4708465488a3f07d4f512b0e18c67646cf11a039bc7fd489c5e62bcbe130d4d5d14b0cc1c39f96407dc144380512a995badd8a7d8bcdec05251acc91b51f01193094609e0a9ee794cc77831252937b28a79017c0c3b2f4fed064045aa356519ed36d5ada830927203cdd57c5a506d62a21b1a4c19f5cd4ec78b4a88471c37eafb0facd1ddd9772cc5f155d22e6d6afe44225425ad585adb603827a74", 0xc1}], 0x7}}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f00000055c0)="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", 0xff}, {&(0x7f00000056c0)="42dd74a74dc3dd15e27fa39e46b907bdf0e58afdcc28eecf2dbf0d2d258576e0103b9d670a84f3c7af131c598cdf3c948d15d1a60c11011110f09acf36fb72d79803b01dd92f4b272619d6e0ac1f684d71d8834eb00f342825e5c6baf9c0237d8ef3e04273a62c24383c681810cbef2a3e51ad85912182d68693556a3ae5f4839ab4d37d9784255eeb9ae6b82a78d4729bada55b98deb246e8aa15426edbfe7974503211b4d1cf74502b378fa6d1138946300c9d59a4f82909b1e00f82c5897a45b1951bbcfa8a15bb0dabcc0d70567885", 0xd1}, {&(0x7f00000057c0)="ce725c37f72d259eaaf5c537184b0464a1da048eb820d8c8f4f27fb735ccc4206a561ed808e35701001b44294622e80606661395a63804a82c0b3b23c540aed9aba7663466815311f9203c10e51022685591cdf4a557e1bed2e624d2b5fcb352108ff6b7465fc31726a9bcd4075a75e6032ff7d7c1f533c01291d1f8854f0732984e561458064c6fdf5331683b2b44561284943f4db2452187c58270f855a179e3eacd34652bbccadd47362f38d393d4", 0xb0}], 0x3, &(0x7f00000058c0)=[{0x38, 0x113, 0x6, "ee195e0481a8e0ebbb18e97d4defef8a594eea66356f3ff6c1d85bc2059a8b8b7f"}], 0x38}}], 0x3, 0x4000) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) 06:18:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x6558, 0x0}, 0x0) [ 422.721105][T19324] ------------[ cut here ]------------ [ 422.727087][T19324] WARNING: CPU: 1 PID: 19324 at include/linux/thread_info.h:150 tipc_msg_append+0x49a/0x5e0 [ 422.737416][T19324] Kernel panic - not syncing: panic_on_warn set ... [ 422.744013][T19324] CPU: 1 PID: 19324 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 422.752341][T19324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.762398][T19324] Call Trace: [ 422.765700][T19324] dump_stack+0x188/0x20d [ 422.770043][T19324] ? tipc_msg_append+0x3c0/0x5e0 [ 422.775157][T19324] panic+0x2e3/0x75c [ 422.779067][T19324] ? add_taint.cold+0x16/0x16 [ 422.783830][T19324] ? printk+0xba/0xed [ 422.787825][T19324] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 422.793400][T19324] ? __warn.cold+0x14/0x35 [ 422.797813][T19324] ? tipc_msg_append+0x49a/0x5e0 [ 422.802758][T19324] __warn.cold+0x2f/0x35 [ 422.807010][T19324] ? tipc_msg_append+0x49a/0x5e0 [ 422.811960][T19324] report_bug+0x27b/0x2f0 [ 422.816360][T19324] do_error_trap+0x12b/0x220 06:18:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001b440)=""/102400, 0x19000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x6800, 0x0}, 0x0) [ 422.820953][T19324] ? tipc_msg_append+0x49a/0x5e0 [ 422.825898][T19324] do_invalid_op+0x32/0x40 [ 422.830318][T19324] ? tipc_msg_append+0x49a/0x5e0 [ 422.835266][T19324] invalid_op+0x23/0x30 [ 422.839424][T19324] RIP: 0010:tipc_msg_append+0x49a/0x5e0 [ 422.844972][T19324] Code: 18 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 2e 01 00 00 49 83 7e 18 00 0f 84 d4 fc ff ff e8 1d e8 da f9 0f 0b e8 16 e8 da f9 <0f> 0b 41 bc f2 ff ff ff e8 09 e8 da f9 44 89 e0 48 83 c4 50 5b 5d [ 422.864671][T19324] RSP: 0018:ffffc90008b6f770 EFLAGS: 00010212 [ 422.870867][T19324] RAX: 0000000000040000 RBX: 0000000000000018 RCX: ffffc90001fea000 [ 422.878838][T19324] RDX: 0000000000000a8a RSI: ffffffff8798a9da RDI: 0000000000000007 [ 422.886804][T19324] RBP: ffffffffffffffe8 R08: ffff888096504280 R09: ffffed101316de1d [ 422.894780][T19324] R10: ffff888098b6f0e7 R11: ffffed101316de1c R12: ffff888098b6f0e8 [ 422.902855][T19324] R13: ffff888098b6f0d0 R14: ffff8880a2b717c0 R15: dffffc0000000000 [ 422.910897][T19324] ? tipc_msg_append+0x49a/0x5e0 [ 422.915960][T19324] __tipc_sendstream+0xac3/0x1200 06:18:31 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}, 0x1, 0x0, 0x0, 0x8815}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x220, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x800) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, 0x0, 0x0) [ 422.921011][T19324] ? tipc_connect+0xb90/0xb90 [ 422.925757][T19324] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 422.931578][T19324] ? __local_bh_enable_ip+0x159/0x270 [ 422.936963][T19324] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 422.942951][T19324] ? lock_sock_nested+0x94/0x110 [ 422.947898][T19324] ? lock_sock_nested+0x94/0x110 [ 422.952852][T19324] tipc_sendstream+0x4c/0x70 [ 422.957456][T19324] tipc_send_packet+0x3c/0x60 [ 422.962143][T19324] ? tipc_sendstream+0x70/0x70 [ 422.966920][T19324] sock_sendmsg+0xcf/0x120 [ 422.971353][T19324] ____sys_sendmsg+0x32f/0x810 [ 422.976130][T19324] ? kernel_sendmsg+0x50/0x50 [ 422.980816][T19324] ? __lock_acquire+0x2226/0x4a70 [ 422.985856][T19324] ___sys_sendmsg+0x100/0x170 [ 422.990541][T19324] ? sendmsg_copy_msghdr+0x70/0x70 [ 422.995749][T19324] ? rcu_read_lock_held_common+0xa0/0xa0 [ 423.001386][T19324] ? __lock_acquire+0x2226/0x4a70 [ 423.006428][T19324] ? find_held_lock+0x2d/0x110 [ 423.011202][T19324] ? __might_fault+0x11f/0x1d0 [ 423.015977][T19324] ? ksys_dup3+0x3c0/0x3c0 [ 423.020403][T19324] ? lock_downgrade+0x840/0x840 [ 423.025280][T19324] __sys_sendmmsg+0x195/0x480 [ 423.029968][T19324] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 423.035090][T19324] ? ktime_get_ts64+0x110/0x3e0 [ 423.039962][T19324] ? _copy_to_user+0x126/0x160 [ 423.041290][T19337] IPVS: ftp: loaded support on port[0] = 21 [ 423.044739][T19324] ? put_timespec64+0xcb/0x120 [ 423.044774][T19324] ? ns_to_kernel_old_timeval+0x100/0x100 [ 423.044886][T19324] ? __x64_sys_futex+0x380/0x4f0 [ 423.044909][T19324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.044929][T19324] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 423.077627][T19324] __x64_sys_sendmmsg+0x99/0x100 [ 423.082573][T19324] do_syscall_64+0xf6/0x7d0 [ 423.087089][T19324] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 423.092983][T19324] RIP: 0033:0x45ca69 [ 423.096883][T19324] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.116844][T19324] RSP: 002b:00007f6c89383c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.125350][T19324] RAX: ffffffffffffffda RBX: 00000000004fcf40 RCX: 000000000045ca69 [ 423.133329][T19324] RDX: 00000000000000cc RSI: 0000000020000140 RDI: 0000000000000007 [ 423.141309][T19324] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 423.149547][T19324] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 423.157522][T19324] R13: 00000000000008f5 R14: 00000000004cbc5c R15: 00007f6c893846d4 [ 423.167429][T19324] Kernel Offset: disabled [ 423.171993][T19324] Rebooting in 86400 seconds..