0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40804}, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x1, 0x88805, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) [ 710.974240][T16226] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 711.044986][T16226] device team_slave_0 entered promiscuous mode [ 711.051564][T16226] device team_slave_1 entered promiscuous mode [ 711.057877][T16226] device virt_wifi0 entered promiscuous mode [ 711.121873][T16226] device macsec1 entered promiscuous mode [ 711.149359][T16226] device team0 entered promiscuous mode [ 711.186050][T16239] bond194: (slave bridge383): Enslaving as a backup interface with an up link 07:39:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b785bddcf97f3ff91a7d503d6659d20b8be13ae064c990a0026866c0c522be0bde8c973282ef1b4b8239feb685402ffe", 0x30) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket(0x5, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="66cae71325071c1f26eba694767b823ae999eb872e61b9ae2d78b6c5441cc76f45fc2599916060ef4ba8b21dd94b30e3787e9677e037b95ad4a44213beb6f43cf833f101e02d103d99d840965b080b9b18a1baf2f1b580f056bb2bf8baa9eb47e16243b2a87a95843757400154934817949dd4876e01973cb2b0e3dcd04c0e7423c1dd093e595dd5238181471668d34bdf529b95327d61af0689c4e7eca099ac23cd58f261", 0xa5) read(r2, &(0x7f0000000200)=""/86, 0x2e9) [ 711.257693][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 711.257706][ T29] audit: type=1804 audit(1599032355.812:1132): pid=16207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/501/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 711.300961][T16224] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:15 executing program 5: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff0001002e7e0f4a43ecd2bc0b6ee3a1108d078500010047a4d391ee8d312ab701caa3f5e6da0d7bb2dc8551f71b08a2fb0e7875306f2a34ecbc3e5a0bf1482d72bef1a8647c08d36ea1f3e4d1c1b903e4591fcab29df2205259f97f2dc785ab10be50ff7650afd4d49b7c511698cbcd581f06bd65c48aec43e7df62c183695651321018c0ec89e67ca5f192cb30d904a9e493e1d8841ddd89facdcccc0d3c32f0c316007b82b7ed0235ca6a4b8c8cbf0860d2c2ef8e4ed21dead226e81a859321b230380d2b1f095a555b21f782a4"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x80000) accept$unix(r4, &(0x7f0000000300), &(0x7f0000000400)=0x6e) r5 = socket(0x1000000000000010, 0x80802, 0x0) write(r5, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_buf(r5, 0x0, 0x2e, &(0x7f0000000140)="605b24b63f04408e60c13244fa9617e66751b52e383c3e3c531d04aed9bb4a832a90952b9c7a15ac576b6fddc1ca4e941b6ec4355a27227f73f6e07e8dce935695491d9598aa320291c268ff027758c115e72d36b655da4f86ad8df9fc88f53bb61b0cef3169657f30b705dd94479f052c408f0ba2eaecc03af548af10a2b05d9e10ee7696d284a410b491005b59801ad93fa5ed70e2272e94d4458530a73e975fb3bcc2e35962ecf857019c1896d4310f8a5762af190de673252ca132", 0xbd) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendfile(r3, r2, 0x0, 0x100000001) 07:39:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000003110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008600) 07:39:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', @ifru_flags}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r0, 0xffffffff, 0x3, 0x80}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff995}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8001) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48044) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x7fffffff, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockname$l2tp(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10) write$cgroup_subtree(r6, &(0x7f0000000900)=ANY=[], 0x3ff800) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="fb", 0x1}], 0x1, 0xbff800, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x400, 0x7f75, 0x100}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r7, &(0x7f0000000700)=0x4) [ 711.494708][T16294] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 711.589506][T16298] bond195: (slave bridge384): Enslaving as a backup interface with an up link 07:39:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x98, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc0}}]}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @remote}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3f}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40c49}, 0x4080) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB="2bb41403e7f0f5edc8ce9685ac6d1e3caed47ca02c8ea12683e8d46301e33642e09f8fae066528c41754b021e197a14c3bcb8da328504c3f6a2d3cc88e8b88783b50bba36c47539a30da61386af7ede8f25ebfded6c6524b1f01df64a1de6a9ba5641db3772cd34cefeb46dbbbd421"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100250137b100000000000010000000", @ANYRES32=r8], 0x20}}, 0x0) [ 711.639439][ T29] audit: type=1804 audit(1599032356.202:1133): pid=16335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/540/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 711.678347][T16298] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 711.720683][T16298] bond195: (slave bridge385): Enslaving as a backup interface with a down link [ 711.751184][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000004110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = epoll_create(0x7) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000400)=""/211, &(0x7f0000000100)=0xd3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x25}, 0x14) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pselect6(0x40, &(0x7f00000000c0)={0x5b1, 0x5, 0x200, 0xc7, 0x3, 0x5, 0xfffffffffffffffc, 0x100000001}, &(0x7f0000000140)={0xee84, 0x7fff, 0x0, 0x5012201a, 0x100000000, 0x101, 0xffffffffffffffff, 0x8}, &(0x7f00000001c0)={0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x2}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000640)={&(0x7f0000000600)={[0x1f]}, 0x8}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r4, 0x25}, 0x14) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="e17c71411f883ad1e7f4bb5dec6278b77283b51e9ef6315a221813e58c9af92ad7992967ba84f78f16eef90a057d1a1fd70a68528f43f4d6a4f409c4a124e2d2467f84467a88059447d93e0b2a317475e1b89e6ba0fff605f28302e460fd1ff3790efaa9c0343745699e841ed57304df245f01a082eec4854371fc7d10ad8e8f7e884d68f1d3a2b945c38624d6b6aa2d68", @ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x40044}, 0x44040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r3, 0x0, 0x100000001) r6 = accept$unix(r3, &(0x7f0000000680), &(0x7f0000000700)=0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000740)={0x6, 'team0\x00', {0x7f}, 0x6}) [ 711.778327][ T29] audit: type=1804 audit(1599032356.232:1134): pid=16295 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/540/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 711.852059][ T29] audit: type=1804 audit(1599032356.312:1135): pid=16345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/502/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 711.946699][T16347] bond15: (slave bridge33): Enslaving as an active interface with an up link 07:39:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x4}]}, 0x10) write(r0, &(0x7f0000000140)="0300ffff0000", 0x6) [ 711.992347][T16371] bond15 (unregistering): (slave bridge33): Releasing backup interface 07:39:16 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0xc, 0x0, &(0x7f0000000040)) socket$caif_seqpacket(0x25, 0x5, 0x2) 07:39:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008700) 07:39:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRESDEC, @ANYRESHEX=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 07:39:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x14e24, 0x80000000}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400008}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000606050000000000000000000a0000070900030073797a310000000005000800070000000900030073797a3200000000080000007379b71000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) 07:39:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x101) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 712.370556][ T29] audit: type=1804 audit(1599032356.932:1136): pid=16411 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/503/cgroup.controllers" dev="sda1" ino=16336 res=1 errno=0 [ 712.453252][ T29] audit: type=1804 audit(1599032356.952:1137): pid=16412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/542/cgroup.controllers" dev="sda1" ino=16344 res=1 errno=0 [ 712.473751][T16371] bond15 (unregistering): Released all slaves [ 712.601867][T16388] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 712.616504][ T29] audit: type=1804 audit(1599032357.162:1138): pid=16420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/493/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 [ 712.714547][T16397] bond196: (slave bridge386): Enslaving as a backup interface with an up link [ 712.853273][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 712.902909][T16398] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:17 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockname$unix(r0, &(0x7f0000000200), &(0x7f0000000080)=0x6e) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x5, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x0, 0x0, 0x2, 0x1}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="34e33120a46d120f7b244f18a0d50431674466989598f646ffffff6eaaa7b0d5deed134505b95545f88a8606d35573b125d231b18217"], 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:39:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xd5480a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), 0x4) sendfile(r3, r1, 0x0, 0x100000001) [ 712.966831][T16497] bond196: (slave bridge387): Enslaving as a backup interface with a down link 07:39:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000005110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:17 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e03, @rand_addr=0x64010102}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001a00)="e1b023c21959ab1ba3cbe9cd17eadd14833ae32526d1ad2e3e922135cafa4e435c017ac331af3e613b3f5d3efbccb018c7010d8379a2084d6c4368890829a860782e3c17b8484efbb468240479d5244541b48e4928dcef63a92824456314ba92efb1924809167f17291f3a056b4c428e8c449fd95961e65a0323d5607b1d9c17986505a2ebbc78e484b54000789ec6b90c1a18e45de2bf20baba1f1aa2ecd5261523b07414f75db2566d246eda5a00000000b6462229a15d9130f07bc823105e81b02483e9003b2a2ab1f76076076674cc7d00362192ae9cab0de5be28c6a9a90db62adbd021417b6e8586702b411a5fea0fac4360d47fd2f8774ddb81ff9d0b5d4dfa687525afffac6ef51d8f99851cf8f5a869795c3645b60021d8dcd93277444a069a10e2f718ef0c2d0c855e481fc95af292d3a1b4afd96b222aa60edc88b6b63abf70589f45ebe2988c5e07b1c7b264201d465a8026fbf68c0180761096084027463981d54a7c93b19222727114aafe2605b9dc87d91f8cc73dbc3142362b19aa391b227783a873e21f780266652718fe300d555c75f2a8b5fed581e7f1048807ce40bb3bd7362d92f9bc0e06d88b1b45191ba24f727da12f57df961a9a57bf8a5dbb6d88f15bccad8b4ce720ccc162b1ea074565778c2ab03549a6ebfddc53d4c80000000000000000", 0xcd}, {&(0x7f0000002c80)="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", 0x71c}], 0x2, 0x0, 0xd}}, {{0x0, 0x0, &(0x7f0000000040), 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000018c0)='&', 0x1}], 0x1}}], 0x3, 0x4c095) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x8) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x100) 07:39:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008800) [ 713.253143][ T29] audit: type=1804 audit(1599032357.812:1139): pid=16515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/543/cgroup.controllers" dev="sda1" ino=16348 res=1 errno=0 07:39:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x80}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff7}, @jmp={0x5, 0x1, 0xb, 0x3, 0x4, 0xfffffffffffffff4}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x1, 0x4, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xe2, &(0x7f00000002c0)=""/226, 0x41000, 0x3, [], 0x0, 0xa, r1, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x3, 0x9, 0x2}, 0x10, 0x0, r1}, 0x78) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000200)) getsockname$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @null, @remote, @remote, @bcast, @bcast, @remote, @rose]}, &(0x7f0000000180)=0x48) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) socket$rxrpc(0x21, 0x2, 0x0) 07:39:17 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockname$unix(r0, &(0x7f0000000200), &(0x7f0000000080)=0x6e) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x5, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x0, 0x0, 0x2, 0x1}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="34e33120a46d120f7b244f18a0d50431674466989598f646ffffff6eaaa7b0d5deed134505b95545f88a8606d35573b125d231b18217"], 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 713.337990][T16526] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 713.422837][ T29] audit: type=1804 audit(1599032357.982:1140): pid=16533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/504/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 713.530178][ T29] audit: type=1804 audit(1599032358.092:1141): pid=16546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/473/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 713.614894][T16529] bond197: (slave bridge388): Enslaving as a backup interface with an up link [ 713.723153][T16529] bond197: (slave bridge389): Enslaving as a backup interface with a down link 07:39:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x19020040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xff, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 07:39:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000006110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:18 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x1401, 0x611}, 0x10}}, 0x0) 07:39:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008900) 07:39:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008800) [ 714.213150][T16598] bond198: (slave bridge390): Enslaving as a backup interface with an up link 07:39:18 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f00000000000014008e06d202cbbc26f16c616e1000000400027a88cc90e9fc540f4bc699054deaf0e3ffbc2a46156956a5c3358154a8fcc0059a8100000000000000037db54a204a2d17d8f84592f8bf4a52eaa41d2d8afa61b4da424614c8d1047d2e156ae9e56b8f59c0e766d7f23e8138e0efc1927fcd1100"/134], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40080c0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) [ 714.338301][T16598] bond198: (slave bridge391): Enslaving as a backup interface with a down link 07:39:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x80}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff7}, @jmp={0x5, 0x1, 0xb, 0x3, 0x4, 0xfffffffffffffff4}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x1, 0x4, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xe2, &(0x7f00000002c0)=""/226, 0x41000, 0x3, [], 0x0, 0xa, r1, 0x8, &(0x7f0000000400)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x3, 0x9, 0x2}, 0x10, 0x0, r1}, 0x78) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000200)) getsockname$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @null, @remote, @remote, @bcast, @bcast, @remote, @rose]}, &(0x7f0000000180)=0x48) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) socket$rxrpc(0x21, 0x2, 0x0) 07:39:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000007110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 714.445227][T16643] IPVS: ftp: loaded support on port[0] = 21 [ 714.534570][T16643] virt_wifi0 speed is unknown, defaulting to 1000 07:39:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r3, r1, &(0x7f00000000c0)=0x5, 0x6) sendfile(r2, r1, 0x0, 0x100000001) [ 714.798051][T16665] bond199: (slave bridge392): Enslaving as a backup interface with an up link [ 714.912414][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 715.000396][T16643] IPVS: ftp: loaded support on port[0] = 21 [ 715.008110][T16690] bond199: (slave bridge393): Enslaving as a backup interface with a down link 07:39:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008a00) 07:39:19 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x9, 0x2, 0x40000080, 0x1, 0x85, 0x1c503c8d, 0x3f}, 0x9c) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), 0x4) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x1000e}}], 0x4000000000001ea, 0x0) socket(0x1d, 0x6, 0xac) 07:39:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000008110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 715.106132][T16643] virt_wifi0 speed is unknown, defaulting to 1000 07:39:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0x10000, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x36, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000800706010341d43a83587cff000100e9000500010047eb7d4cbe11f02bb93e819778f0c428fa30333d7d4a3cd1bb8bbf0f57"], 0x1}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 715.332388][T16739] validate_nla: 5 callbacks suppressed [ 715.332396][T16739] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000007110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 715.516556][T16746] bond200: (slave bridge394): Enslaving as a backup interface with an up link 07:39:20 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x9, 0x2, 0x40000080, 0x1, 0x85, 0x1c503c8d, 0x3f}, 0x9c) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), 0x4) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x1000e}}], 0x4000000000001ea, 0x0) socket(0x1d, 0x6, 0xac) [ 715.641994][T16739] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000009110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 715.785190][T16803] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:39:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008b00) [ 715.881341][T16806] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 716.115654][T16809] bond11: (slave bridge18): Enslaving as a backup interface with an up link [ 716.175065][T16844] bond201: (slave bridge395): Enslaving as a backup interface with an up link [ 716.226929][T16844] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 716.290420][T16844] bond201: (slave bridge396): Enslaving as a backup interface with a down link [ 716.751568][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 716.751581][ T29] audit: type=1804 audit(1599032361.312:1152): pid=16862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/507/cgroup.controllers" dev="sda1" ino=16368 res=1 errno=0 07:39:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x400) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/352], 0x111) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r1) ioctl(r1, 0x2, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@empty, @dev}, &(0x7f0000000180)=0x8) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0xc8, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000240)=""/200}, &(0x7f0000000100)=0x78) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 07:39:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x4, 0xd9, 0x0, 0x81}, 0x6) 07:39:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010008506000010000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64703de8fd82d7c86ccd60275580ecfd9231f3d5fcfcbd1fdd5b798185cb3f4d4f1791e9d29a96a9821a884c02e956a81797a9ca92051d6bca862119d2d0e43913dd9b9b5f2398aac051299c4dc2e5c294cd88b6b94a928a1c83ab9c7df1b7ff2fa90a503c3b4a45ede9dd4f7bb38d8515ce71838a50d091ae2686c0112e2d27e0c4b252d530ab231286279e998b2e1b59da200adcb593cf91d42643d448a270e8dff651cf84d4a4d6894f78b0e7c50b76769e"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8b6e0300, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:39:21 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00bf8a26", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:39:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000a110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008c00) [ 717.380079][ T7] tipc: TX() has been purged, node left! [ 717.415164][T16912] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 717.479126][ T29] audit: type=1804 audit(1599032362.042:1153): pid=16911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/508/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 07:39:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f7700000000400002003c000b800800010006000000300002802c0001"], 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r3}) sendmmsg$alg(r4, &(0x7f0000000200), 0x0, 0x40001) [ 717.511853][ T29] audit: type=1804 audit(1599032362.072:1154): pid=16949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/547/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 717.550985][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 717.623433][T16912] bond202: (slave bridge397): Enslaving as a backup interface with an up link 07:39:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') accept4$netrom(r1, &(0x7f0000000640)={{0x3, @rose}, [@bcast, @rose, @rose, @netrom, @netrom, @default, @remote, @null]}, &(0x7f00000006c0)=0x48, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xdc4af39fd39855ab}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x20008006}, 0x20000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000740)={0x0, @ethernet={0x6, @dev={[], 0x3f}}, @rc={0x1f, @fixed={[], 0x10}, 0xfb}, @nl=@unspec, 0x3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000700)='ip6gre0\x00', 0x4, 0xc71, 0xd4}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2197983a5ede396441c92b51994a", @ANYRES16=r6, @ANYBLOB="9f2100"/12, @ANYRES32=r8, @ANYBLOB="1400020069703665727370616e30000000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1, 0xfff, 0xfff9, 0x7ff, 0x0, 0x6, 0xfb9b, 0x401]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, "99642916"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x479}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xc7, 0xac, "65fd22df95cc568c70a3adb068129485c0494109755093296fb52b4f02ce3af0fdd8619e434bdd26220463b5b6baf37ad8464ea27a3780b054001c83011325ded05128c4fa48164b266cb20de9f9fa5f325d5bcc86254fe293f943e1dd7e252b680e9b50811589670e4aff73aef807b111a6ba7a8a1c26a24d0241117a40dd0d94832577390c6cd4b0fe147ab68bfe04ddad3267b74de0e4b366ff81fc1049bf985ee92aa8eebe79ac3f26ea00874e6a09039c60b7c9fd35b764437dc8196133dc877a"}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r4, r3, 0x0, 0x100000001) [ 717.674779][T16940] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 717.696955][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008d00) [ 717.756096][T16940] bond202: (slave bridge398): Enslaving as a backup interface with a down link [ 717.810685][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000c110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 717.907289][ T29] audit: type=1804 audit(1599032362.462:1155): pid=16973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/548/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 07:39:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000a110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 717.961383][T16971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}}, 0x8000) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000180)=@null) mmap(&(0x7f0000005000/0x3000)=nil, 0x200000, 0x0, 0x12, r1, 0x0) [ 718.042510][ T29] audit: type=1804 audit(1599032362.542:1156): pid=16980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/509/cgroup.controllers" dev="sda1" ino=16368 res=1 errno=0 [ 718.101044][T16985] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:22 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x505, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 07:39:22 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0xd1357000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r2, 0x5451) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)=r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @empty}, 0x201, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @mcast1, 0x1}, {0xa, 0x4e23, 0x4, @empty, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 07:39:22 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x505, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 07:39:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 718.437984][T17035] IPVS: ftp: loaded support on port[0] = 21 [ 718.537802][T16990] bond203: (slave bridge399): Enslaving as a backup interface with an up link [ 718.574545][T16992] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:39:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008e00) 07:39:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x400}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x7ff, 0x6, 0x1ff, 0x3, 0xc0, 0x1, 0x7, 0x7fff]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048c80}, 0x40045) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 07:39:23 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000e0000006907800000000e000000100000000c351cdc4007b4fa11b6d10f6a9e862c81c940b6d6f86e0a33764a71622ff98eb1b3ea13fc6d29a08a5beecd729e8052eb655e09523c3ee02959cbe4a56383f27fa3c33a66777c6dbfbccf15eb4858c3ec3cf2e26104393e0ed2b947604dba21bb6ac49d1b9f786027905e4fa3913fdf67d07d1b5bf9b0d1fe48302fc6c9e5933f6dcfdf33bf0014aea18e778d86266b57cc6cbe8a7d80415f428809aa0d3648d776b33490228dfba18498f1e993c9a6da180756cd331857cb8ac6717959372e89e799079bd661c55aaccbf36ede6624eae", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x10d, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, 0x0, "000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff00"}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007bd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1}, 0x320) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 718.758722][T17025] bond15: (slave bridge35): Enslaving as a backup interface with an up link 07:39:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9a8ed29fa0047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 718.830615][ T29] audit: type=1804 audit(1599032363.393:1157): pid=17092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/510/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 718.838314][T17035] virt_wifi0 speed is unknown, defaulting to 1000 [ 718.886977][T16990] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 718.922538][T17056] bond203: (slave bridge400): Enslaving as a backup interface with a down link 07:39:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0x4}}, 0x80, 0x6, 0x46ce, 0xe3ca, 0x10, 0x9, 0xff}, 0x9c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 718.961828][T17100] net_ratelimit: 58 callbacks suppressed [ 718.974690][T17100] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 07:39:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000e110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 719.018777][T17107] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 07:39:23 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020a841c89e8e60ab0594000000000000"], 0x68) [ 719.072912][ T29] audit: type=1804 audit(1599032363.633:1158): pid=17101 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/550/cgroup.controllers" dev="sda1" ino=16291 res=1 errno=0 [ 719.111830][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 719.329407][T17162] IPVS: ftp: loaded support on port[0] = 21 [ 719.360141][T17139] bond204: (slave bridge401): Enslaving as a backup interface with an up link [ 719.416765][T17035] IPVS: ftp: loaded support on port[0] = 21 07:39:24 executing program 0: unshare(0x40000000) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00000000c0)={@multicast1, @empty, @rand_addr=0x64010101}, 0xc) r0 = socket(0x10, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x1000}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0xda178ab5f416d6a6}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRESDEC, @ANYRESHEX, @ANYRES32], 0x208e24b) close(r1) [ 719.473521][T17139] bond204: (slave bridge402): Enslaving as a backup interface with a down link [ 719.484232][ T29] audit: type=1804 audit(1599032364.043:1159): pid=17092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/510/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 719.593989][T17184] IPVS: ftp: loaded support on port[0] = 21 [ 719.597507][T17162] virt_wifi0 speed is unknown, defaulting to 1000 07:39:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000010110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 719.699992][T17184] virt_wifi0 speed is unknown, defaulting to 1000 [ 719.772530][ T29] audit: type=1804 audit(1599032364.333:1160): pid=17109 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/550/cgroup.controllers" dev="sda1" ino=16291 res=1 errno=0 [ 719.964865][T17162] IPVS: ftp: loaded support on port[0] = 21 [ 720.039151][T17224] bond205: (slave bridge403): Enslaving as a backup interface with an up link [ 720.143918][T17224] bond205: (slave bridge404): Enslaving as a backup interface with a down link [ 720.145354][T17184] IPVS: ftp: loaded support on port[0] = 21 [ 720.255185][T17184] virt_wifi0 speed is unknown, defaulting to 1000 07:39:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x24}}, 0x0) listen(r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, 0x0, "000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000621000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 07:39:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x4, 0x80000001, 0x1ff, 0x0, 0x100}, &(0x7f00000004c0)=0x98) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2d, 0x8f, 0x6, 0x5, 0x41, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x7800, 0x3, 0x10001}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1f, 0x0}, 0x8) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0)={0x7d, 0x3, 0x7, 0x80, 0x7f, 0x3c, 0x5, 0x7f, 0xf8, 0x3b, 0x9, 0x3f, 0x0, 0xf9}, 0xe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x17}, 0x8}}}, 0x84) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800}, @alu={0x4, 0x0, 0x6, 0x3, 0x2, 0xffffffffffffffe0, 0x10}, @call={0x85, 0x0, 0x0, 0x11}, @ldst={0x1, 0x3, 0x2, 0x3, 0x0, 0xc, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x800, 0x42, &(0x7f0000000140)=""/66, 0x40f00, 0x0, [], r4, 0x1b, r0, 0x8, &(0x7f0000000280)={0x3, 0x6}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x8, 0x3f}, 0x10, r5}, 0x78) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendfile(r3, r1, 0x0, 0x100080737) 07:39:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008f00) 07:39:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 07:39:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000048110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xa4d976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100060000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000240)={{r1}, {@void, @actul_num={@val=0x2b, 0x7, 0x74}}}) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000180)="c00a05cd37fd05fbadee1d8605f8ba862eeefb6e1ce63e8ddef48fdf0f23f748242fc73f", 0x24}], 0x2, &(0x7f0000001300)=[{0x28, 0x6a4d16365bec2c21, 0x51, "32a9d0ed202b25e39aacd3d08c67f814b13116dc7f3049b2"}, {0x1010, 0x100, 0x80, "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"}, {0x70, 0x102, 0x6c, "926e0e1910425416acaf5624ceff2f8a0cb85435a94f6534440d919db5e076f3ff3c2ef1861cce5e4cac4c702025dc0f87bba0ad353a9c42533d235ba3d3d1146e2482255e6b9896e7624982c7217184093c3bc55eb21d85249c1c7513d40783"}, {0xe8, 0x10d, 0x1f, "0fa526805039fee9d9ada2f6cdc291534bc8e791fcff8dc07ed80f8fbcd1f3d1e411e42c52826caed7ae603cdf2705c3527f4c29382da9b5d5748ded6c15506543a70f5144f39df0844965760ffe7731cb9c7ee5ffc118ee5da51935d6618b09c2eee970a06894f5d545cd1f93d29fcc1c39c2c06598919baa4a52933a686a7264d6dc288dfdcd1ca1d39290d7867895f1fb00b5d2ff340b434cddfc1aa52ecaf916b92eb0ceb930d35067f63901f88cbda13e4012dfb87bd7384e4f675df1b9f9db2eb97a2e4d2dd57c4e4d49d09238ced06e026f"}, {0x1010, 0x111, 0x4, "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"}, {0x58, 0x10b, 0x9, "5d1c6dd9286bf684f96880e3e960629b0bbe50051fb2550835776eb233144060b31de99b5b5fecdf312704bff967fb636d7a09fd8c62a3465957d79ee8f9a1083f2961810d"}], 0x21f8}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 722.443321][ T7] tipc: TX() has been purged, node left! [ 722.450271][ T7] tipc: TX() has been purged, node left! [ 722.456693][ T7] tipc: TX() has been purged, node left! [ 722.566619][T17312] validate_nla: 4 callbacks suppressed [ 722.566628][T17312] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 722.619177][ T29] audit: type=1804 audit(1599032367.183:1161): pid=17307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/511/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 722.729854][T17316] bond206: (slave bridge405): Enslaving as a backup interface with an up link [ 722.749208][ T29] audit: type=1804 audit(1599032367.213:1162): pid=17309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/479/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 [ 722.778531][ T29] audit: type=1804 audit(1599032367.233:1163): pid=17310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/551/cgroup.controllers" dev="sda1" ino=16366 res=1 errno=0 [ 722.805068][ T29] audit: type=1804 audit(1599032367.243:1164): pid=17311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/502/cgroup.controllers" dev="sda1" ino=16364 res=1 errno=0 07:39:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20040000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000300)=0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 722.896247][T17316] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 722.956118][T17325] bond206: (slave bridge406): Enslaving as a backup interface with a down link 07:39:27 executing program 5: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) connect$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x1, 0x2, 0x7, 0x8, 0x7f, "7999d42e97d2c371dd0571b31f739d642e2bb0539595d0e08e3c3febb3b8f3bd44dc218e6cfda84fb97fba0e9299bd1b4d9658289e5b14ccb7599d803c3202", 0x29}, 0x60) mmap(&(0x7f0000af5000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x9a0a5000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x80800) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30117c2aa4e5179bb2c725c26b51d31556f7cc74016d9289c1cc0d4969c423485d9a78552ca4662746dd0c0846e413bfc5ffd5b3449ab1cef2b5d9c3ad518e3a4cb437c65789bd7c66ee83ef61ac91f91a100e5734a1ba5916e767685edc6d35903786e0112af001c280119db9498f89608acb90e0ca0ffa89fe541fa8ea14a3d6dc8b9d74fe0ab98904010a27f42ac4852a2c15cd4468f09144afa5810000"], 0x22) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 07:39:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009000) 07:39:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000004c110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 723.082244][T17368] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 07:39:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6a}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)="2bfd", 0x2}], 0x1, 0x4800000000000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 07:39:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x47a}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xee}}], 0x48}, 0x8801) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000400)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x20004054}, 0x4048040) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000140)={{0x2, 0x4e23, @loopback}, {0x1, @broadcast}, 0xa, {0x2, 0x4e22, @remote}, 'veth1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) [ 723.320934][T17372] bond10: (slave bridge10): making interface the new active one [ 723.364943][T17372] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 723.385717][T17403] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x24}}, 0x0) listen(r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2, 0x0, "000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000621000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 07:39:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009100) [ 723.496017][T17404] bond10 (unregistering): (slave bridge10): Releasing active interface 07:39:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 723.681475][ T29] audit: type=1804 audit(1599032368.243:1165): pid=17466 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/513/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 07:39:28 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) unshare(0x40000000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000400)={0x6, 'macvlan0\x00', {0x246}, 0x1}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x91005000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xeed, 0x5, [0x4, 0x81, 0x3f, 0x8, 0x2]}, &(0x7f0000000100)=0x12) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x8004, 0xe0, 0x8, r4}, 0x10) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000140), 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="73797a3167be6255ec1aac8a1bd1194a8276df7642a9e7c615cf0dccb95928aa566fdc74e3eaf9044639346f58ebb7facc798860286f5464c1417e57b19911e2ce63713eb3f99b93e967c9e04e0e882653facb192bdd580ac7a51932c7585396"], 0x61) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x0, 0x7, 0x4}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x9, 0x8208, 0x400, 0x5, 0x4, 0x80000001, 0x1}, 0x20) 07:39:28 executing program 5: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40c40d5) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x10, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd8, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xed8b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffd}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) r4 = socket(0x1000000000000010, 0x80802, 0x0) write(r4, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg0\x00'}) [ 724.022196][T17404] bond10 (unregistering): Released all slaves [ 724.025689][T17480] IPVS: ftp: loaded support on port[0] = 21 [ 724.143848][T17412] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 724.164459][T17368] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 07:39:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000060110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 724.169273][ T29] audit: type=1804 audit(1599032368.733:1166): pid=17484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/555/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 [ 724.296799][T17480] virt_wifi0 speed is unknown, defaulting to 1000 07:39:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20040000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000300)=0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 07:39:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009200) [ 724.354279][T17532] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 724.518079][ T29] audit: type=1804 audit(1599032369.083:1167): pid=17578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/555/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 07:39:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x40}}, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x1, 0x40}, &(0x7f0000000040)=0x18) [ 724.612100][T17538] bond208: (slave bridge407): Enslaving as a backup interface with an up link 07:39:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e90005000100472ece3c01627948bf1a4231d8466e15f8d36b7fc1819ec8422ecdd81f2b39072bf3a04914b2b0f64894c3d481b0780809"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 724.660822][T17580] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 724.674041][ T29] audit: type=1804 audit(1599032369.113:1168): pid=17484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/555/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 07:39:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009300) [ 724.749330][T17538] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 724.781960][T17589] bond10: (slave bridge11): making interface the new active one [ 724.797640][T17589] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 724.818687][T17498] IPVS: ftp: loaded support on port[0] = 21 [ 724.844152][ T29] audit: type=1804 audit(1599032369.153:1169): pid=17581 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/514/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 724.874088][T17556] bond208: (slave bridge408): Enslaving as a backup interface with a down link [ 724.923069][T17614] bond10 (unregistering): (slave bridge11): Releasing active interface 07:39:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000068110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 725.036071][ T29] audit: type=1804 audit(1599032369.463:1170): pid=17637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/556/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 725.279441][T17614] bond10 (unregistering): Released all slaves [ 725.396059][T17645] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 725.474911][T17647] bond209: (slave bridge409): Enslaving as a backup interface with an up link 07:39:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4b8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f00000004c0)=@raw=[@generic={0x3, 0xe, 0xd, 0x65, 0x3ff}, @alu={0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff8, 0x1}, @map, @generic={0x1, 0x9, 0x9, 0x1ff, 0x2ab}, @ldst={0x8071c5f4d8e1d99c, 0x0, 0x0, 0x2, 0x6, 0x20}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x41000, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000480)={0x9, &(0x7f0000000400)=[{0x5, 0x4, 0x53, 0x7}, {0x10, 0x0, 0x9a, 0x48}, {0x8, 0x9, 0xe3, 0x4}, {0xc5ea, 0x20, 0x6, 0x4}, {0x1, 0x1, 0x7f, 0x2}, {0x5, 0xd7, 0x8, 0x5}, {0x9, 0x2, 0x0, 0x2}, {0x8, 0x2, 0x6, 0x7}, {0x3ff, 0x0, 0x5, 0x80}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x25}, 0x14) r3 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0x25}, 0x14) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x2006, 0x0, 0xaf}]}) 07:39:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009400) 07:39:30 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x800}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002100010100000000000000000200000000000000000400000ce117006e19910e3b435b9d254b3935e28d084a335a59e06476c60595f95f06463a0b6a899c0bcf0558dff473543b1c976ada08d6cfe3ea463abebc9212e21af063fd46515848fe85458f4e363b170dee381ff98548e2f9425d35a808be7d7858c5eae862f0bed925d0d11cc23b882015e70769f10d20a428f1d3a87f1045874c3b2b0eb84313fc", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) socketpair(0x28, 0x808, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000240)={r7}) [ 725.584503][T17648] bond209: (slave bridge410): Enslaving as a backup interface with a down link [ 725.680580][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.743912][T17738] PF_BRIDGE: br_mdb_parse() with invalid entry [ 725.775391][T17738] PF_BRIDGE: br_mdb_parse() with invalid entry 07:39:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 07:39:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000006c110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f00000002c0)=""/238, &(0x7f0000000240)=0xee) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2100000011000d0400"/20, @ANYRES32=r4], 0x20}}, 0x0) 07:39:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009500) 07:39:32 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x25, 0x1, 0x95d0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0302730800000000140012000c000100626f6e64"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4}}}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f00000003c0)={'\x00', 0x3a1, 0xfff}) 07:39:32 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2939000000657464657673696d0000000f0002006e657464657673696d30000008008b0000000000000000000000000000008a", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000300f1ff08000100753332"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r4, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4008013) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x29, @private0={0xfc, 0x0, [], 0x1}, 0xd}, 0x1c) r6 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]}, 0x332) close(r5) syz_genetlink_get_family_id$netlbl_mgmt(0x0) [ 728.118467][T17778] validate_nla: 1 callbacks suppressed [ 728.118477][T17778] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 728.156855][T17779] IPVS: ftp: loaded support on port[0] = 21 [ 728.195001][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 728.195013][ T29] audit: type=1804 audit(1599032372.753:1174): pid=17784 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/557/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 07:39:32 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x6080, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$inet(r0, &(0x7f0000010100)={&(0x7f0000000200)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000440)="0f"}], 0x1}, 0x840) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)) 07:39:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/97, 0x61}], 0x1, &(0x7f0000000200)=""/229, 0xe5}, 0x1}, {{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/205, 0xcd}, {&(0x7f0000000640)=""/32, 0x20}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000740)=""/29, 0x1d}], 0x8, &(0x7f0000000800)=""/13, 0xd}, 0xfffffff8}, {{&(0x7f0000000840), 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/67, 0x43}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000000a00)=""/5, 0x5}, {&(0x7f0000000a40)=""/162, 0xa2}], 0x4, &(0x7f0000000b40)=""/138, 0x8a}, 0x5}], 0x3, 0xdd662b95959a2945, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 728.410739][ T29] audit: type=1804 audit(1599032372.793:1175): pid=17786 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/517/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 728.487633][T17783] bond210: (slave bridge411): Enslaving as a backup interface with an up link [ 728.541415][T17785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009600) [ 728.616729][T17778] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 728.665049][ T29] audit: type=1804 audit(1599032373.223:1176): pid=17835 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/558/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 728.698214][T17788] bond210: (slave bridge412): Enslaving as a backup interface with a down link 07:39:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000006e110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 728.743998][T17779] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.766490][T17777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vcan0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x2001, 'macvlan1\x00'}) ioctl$FIOCLEX(r2, 0x5451) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000440)="dad4a56736672a6189a3ce5bedd1e2041234d8b9b40e20640c8921339c420a3201a1400c805912ff09da16847ac06d14bc2b55aa452844ebd5806d0ea273b33322f380204a909cb10a6fa04f95db96e692822c3300551fbe550b2d6b07f89d342ebffe0c2e69face08802a6c938d895c4daec656b658be178ec620f34c1bcfb48465702d66c8dc844a39e13ca7adcaeb109c84f48930c2703a47dc24369f8e18035a8f70e4656c53e12326d3b45b81a55c1d61e094655fcdd32b151078369a254852b785d2f4becc080c7fd33462", &(0x7f0000000600)=""/160}, 0x20) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x80003a, @loopback, 0x3f}, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x5, 0x7, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @mcast1, 0x1}, {0xa, 0x4e23, 0x4, @empty, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x1, 0x0, 0x81, 0x8, 0x0, 0x1, 0xfffffff9, 0x8000000]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) [ 728.936599][ T29] audit: type=1804 audit(1599032373.493:1177): pid=17853 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/518/cgroup.controllers" dev="sda1" ino=16183 res=1 errno=0 [ 728.968550][T17864] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:33 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05f6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000016c0)={0x80, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x80}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000580)="1ee7f5c114f301897833b4ee5be81e76b0076a46b2f7468ac5628e1a4502b57bb5f20e619b8a81fcb84e9ea4131068bf3aed3b7f0e007ddc92d0785cccca837fb113143bcacf5837ecb45ea8cec8471e0d89d488e6d3c581377665cd9521f2be87e400768b0b1de3b80e0aa35daadea65ee311e7250176bcf7c2a2acf8c1599c8dca183eb4d5337526f9d9e845777c4a9aaaad56d2312b5fe498fce90a66ffadc8d2308fa680da948fe4ea290f5c7fd8e9b3ea5e7903e5d594493ead330bb69afbfe0e6b6abb875ae494983d07f6ad0f205c78e766519378c4e107daea6c96e9a4670308823ca2dd0833422d9db3994f3e7d334239a907c30f07719b225ab969f2f94f771caebc2a93c7eb7e3b1bc89cf230e44b16c1089a3650854aeb790527e2ed4cf2423ae96d49341984278612080fa8e37f942157bf6c91c5624514d54a81b13f59c05b2fa88691e49febd3783222666f2fdef3c186d2351aa606799e81ea0fb2e5ec9fc177a5bf680a2d762ea95132d0f6a03c26ce673432fa6e2a3dc43382ecce2ac519f2c6b46be91be490c2f8fcb9a6e8406c539141dab66863cbff550b2c87cb28579e20aaa73cd3b31fe5727fa1ce0f3553eea94404c7c57eec102cdeba890c61a16a193dc547cc0bb4e47fa3ff2a4688595ea0b11ccb246738dfd6a1c3068d96bb66a5dc78beb2e393ceebca4f0732b105066a1c245ee81c73d596167c0fc3e951dcac688e3409540babf69ccec8bce750e45b3c4d6e62e0a5e29bc0125425dfddd6be09a325363b9bb828e6fe6872b56058f1132fef1c61c1f236c5a06b27537d71a850d604c5219eb4df9057354cef00e70309da12e213d9961917278423df7c3ab98624768f25ef4e88555564dc322a87d934d9ad0de3f1e39c5f946b802139de1d05d9460ad7e978b26f01facea7a2acc23f1137b39f6442d60d38847641775907f0e9a97fb082d8882993135a90a98e1585783d5dc572a7c973f52cd92d190cfdb4e76171a4244af33ec5e08b831e992cbbeabe0826a842ae97e1b3007afe805879996243a1b2d38984f79638b8f59fffa2c58325b1905ba01c59f6880d4694eb554634ba67f55d888174f612a9bfe525eb15c140bfee07a90507398443413579f37a54650fefc53f14a879a5b857a1b8c6e38e91cc2540202cef81a51492698c3440cca2b6b100706a07da142f168d7819ebf95e7e8b90ae2f0873e3081a94aeef87152dabafccc7fd633e452b7ab28a3ed00ff0944cd23cd547989fc6a073bbf3b8013420eb018c7fdf288cd8e1a570e2671e5adf216b29f1c9c256fd50293da7dffd0b2cd186a8463c177738c74a8f2297ef231d316ce83b0f80b31c084f4d7d8fa5b38b6fc3d99969966900fb80412faf568caf6858cddf0df0a6a475e54e97a406a399e9a03e683ecaf46dcd8fc1333001c60fa107deb60bc3be8f57164aa6de9837459703db42ea692cdcfbf0d9ef1c0bb2a678223b430a8158b413d823eb32e2cdf4a46daaa92f4dc2dea2e1e695bf9fbc9defc666031a350f611ffd7e31849571249b110b6f342133aa1bfd85b19228e9168c4716ed79cbc3660bc3f5074ef54d6a2a812c7cf8c45a34ed75d0fc5ee9f6d28d4a8cda52881d230238bc2d64074a8b4d74b93a3eba4d001f9287eae3d563f61221c62ceb067b0a4989f547e62c40f89401fb812715b256e4533218b9c110e4c2eb9ecfca5ff7f47280d0b3982614136cbac13da0ecb2dda3e183272b9d88a56f0b236d05eab7a2df18861b75b92d75271ac8cfdadb98485038255fcf58a507dbbfae77ecb40b6cc6d480abddafb148e82a3172c96654681e6c9bc2e33c5ea9ec6076d06fc49645e8f9a5c1508eb0d7f16b6001239604774e3f930da93b08753653058c5d30c8c05ffa5b7ff803406f71784a5e9953ee05011e9f43b4aa4701803b2d6565bd2e793f0652cbe64d90de7315c88be38c74824b31ae0ac98eb53b72d38633b57c079c6966694b50c3f9e597cd5e3554f84175c4baff9fbcf5d46fcc6da1a8bce3cfe069acc7c8b7868c14f6828bce0600359297c1a2e14045abcc89423004f40b1eccea9343b92ee66cbfb18ae8020d108b71a7fdbfa1c388bb61e5a88f09d540b353505ed53b295fbd74a6fb8b029692c2984750faee3ad0994fe1510c919130d9e8728ee0045dda84768e8305eb8e64edd2b656f7179b00cde3b5d06540f27c825cb76cea2b6897c8cd6dc6fae066d8c591c62a295417dc3d1830bf4b6df2c93a7a5c9cd638134dd4f11675bb4356519d954f212e8c81be12e276502e552157e3461b4bc57edcecf0de045b7e17ce92992a6918f56ed799f40900af58d30d3c41875a6e1ce1ec968359a91c7db681775ba97e50fc29ea0d61e8abfed0796b6459617243eb84342d1a6f80d7ddd5c9ef8eeaddee5e5af1a09c185b0c6f0499ca6641558cc9f0d68eb0d64db5be28c84f3f0b42bb8fa1a324b9fa0a3d643b8a2b338daa632a23a90d1408d69ee3cdc42340d3e6d849b8118c55d0956c287608129c0c223d97e11b7ac92d50ddd334a64486bd3ca4a799c56dbf47612d53d04b85585f52870a8f3eb013399d770e062ca559253e3a9415c8f13c37d99033ffcb1e7aa4aa4d459e0d45526533f88e25498a128bb382fca690b954b0b1c5eda8f861bd646ad0cc0b3c3307fa0ca7c2f8bc75bf02b3b70ea9bb3a96dc", 0x77e}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 729.068430][ T29] audit: type=1804 audit(1599032373.633:1178): pid=17881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/485/memory.events" dev="sda1" ino=16369 res=1 errno=0 [ 729.069894][T17868] IPVS: ftp: loaded support on port[0] = 21 [ 729.097148][ T29] audit: type=1800 audit(1599032373.653:1179): pid=17881 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16369 res=0 errno=0 [ 729.120228][ T29] audit: type=1804 audit(1599032373.653:1180): pid=17881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/485/memory.events" dev="sda1" ino=16369 res=1 errno=0 07:39:33 executing program 5: getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x208, 0x7f, 0x200, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r0, 0x10001, 0x8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 729.187970][ T29] audit: type=1804 audit(1599032373.753:1181): pid=17881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/485/memory.events" dev="sda1" ino=16369 res=1 errno=0 07:39:33 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x80, 0x40, 0x0, 0x10000, 0xfffffff7, 0x5, 0x7a, 0x1b, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r6, 0x1000}, &(0x7f0000000180)=0x8) socket$inet6_sctp(0xa, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 729.292025][T17871] bond211: (slave bridge413): Enslaving as a backup interface with an up link [ 729.368119][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 729.405457][T17782] bond10 (uninitialized): Released all slaves [ 729.440899][T17868] virt_wifi0 speed is unknown, defaulting to 1000 [ 729.452558][T17864] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 729.475183][ T29] audit: type=1804 audit(1599032374.033:1182): pid=17931 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir638920863/syzkaller.oPYru1/559/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 [ 729.495591][T17782] IPVS: ftp: loaded support on port[0] = 21 [ 729.524709][T17878] bond211: (slave bridge414): Enslaving as a backup interface with a down link 07:39:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009700) 07:39:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000074110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 729.670983][T17782] virt_wifi0 speed is unknown, defaulting to 1000 [ 729.686713][ T7] tipc: TX() has been purged, node left! [ 729.783318][T17874] IPVS: ftp: loaded support on port[0] = 21 [ 729.864613][T17987] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 729.952972][ T29] audit: type=1804 audit(1599032374.513:1183): pid=17994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/519/cgroup.controllers" dev="sda1" ino=16377 res=1 errno=0 [ 730.029218][T17995] bond212: (slave bridge415): Enslaving as a backup interface with an up link [ 730.155022][T17987] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 730.223005][T18020] bond212: (slave bridge416): Enslaving as a backup interface with a down link [ 730.388133][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 730.413457][T17782] bond10 (uninitialized): Released all slaves 07:39:35 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, 0x4) listen(r0, 0x0) 07:39:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getsadinfo={0xa, 0x23, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 07:39:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffcc0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706010340d40200000047000000000000c6834b18d3e6ad4063495200000000"], 0x1}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 07:39:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009800) 07:39:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000007a110025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 730.663108][T18059] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) sendto$inet6(r0, &(0x7f0000001180)="7cfd0c0dbc48f57148971a1a934b21d73476b66b9b85242945f297483b4a26c89598d317affb8aed15560a543f86ce7f9aa75940a533fbd3d5d4a0c5df47026cfc7bf98421c3a70e175652499d43af33d8153ca1f2068399acaaa6c9157045bd14c64f65384dc590e58fe62e564ad5f1b15c6b8a0bd8e7ba110971e7bbe79ea4afcb020c0d1fdcf82a7d9090d6", 0x8d, 0x40, &(0x7f0000000040)={0xa, 0x4e23, 0x80, @private0, 0x1ff}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) [ 730.785347][T18063] bond213: (slave bridge417): Enslaving as a backup interface with an up link [ 730.919782][T18063] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 731.025688][T18063] bond213: (slave bridge418): Enslaving as a backup interface with a down link 07:39:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x1406, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) 07:39:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000180025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009900) 07:39:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="01410000", @ANYRES16=r6, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 07:39:37 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000400)=ANY=[@ANYBLOB="56fff8b82aa9b2b6403049b28fbf82d0767e42f783a79cd8b0ba86f39c2ff121ef8e59478a6038b2fc464ee4eb70bcd2691e1296e5a3d0ccc63cdd8b3489bb03761f71d8d0f2a54ba9c1924bb9e8b6fdafa2ba65b5e5971802db4433c414a4829329c4783af048cd03d580613dcb8df867c58ecc40bbaafab2c06c6f0a7e4ad94b0e2b730f3d2edcd7f1b89184e8446212f5a8eb8841141ae125238460f6911f5b83858253783bda58255ed4ce6963"], 0x84}}, 0x24044000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfffffe36) ioctl$FITHAW(r2, 0xc0045878) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000a17) 07:39:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000240)=0xc) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$binfmt_misc(r4, &(0x7f0000000280)={'syz0', "7202efc4949ddcab1bebd8115575c525c59d126812fcfb5c2a30738b08aa7dd20d75f4d51ce84db1aab6e354de98cfd7778e1df5135777334fa8460e89062d8b7eb7dd9580b94c7b9bba38dd7909f5c2d1c9fab414ec4b1c5396521f8c386bb79e268917a6aa53e0fb34acec16b5dda1d3f6923913a48b1ae3058bff880eb779aee69d3f73df2e8aa499e27d784cabe63a541f32d21691ed7e85"}, 0x9e) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000e3ff000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900018a72e7eb68"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000400000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) r6 = accept$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) r7 = socket(0x10, 0x3, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000180)={r9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000003c0)={r9, 0x7fffffff}, 0x8) [ 732.534588][T18130] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 732.720067][T18133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.748763][T18138] bond214: (slave bridge419): Enslaving as a backup interface with an up link 07:39:37 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x48], 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x401, 0x6, 0x800009, 0x4, 0x1}) r3 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000180)={"fa7c5f73d3819c20c2ae4548a752fab4", r4, 0x0, {0xfffffffffffffff9, 0xfffffffe}, {0x445, 0x6}, 0x400, [0x6, 0x6, 0x3ff, 0x8, 0x7fffffff, 0xfffffffffffffffa, 0xab, 0x5, 0x8, 0x90, 0x8, 0x8, 0x800, 0x8, 0x87f]}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) [ 732.790264][T18138] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 732.905274][T18138] bond214: (slave bridge420): Enslaving as a backup interface with a down link 07:39:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000200025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:37 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0x243}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xc}, 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000100)=@llc={0x1a, 0x323, 0x5, 0x7, 0x5, 0x0, @multicast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x24004844) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 733.177019][T18198] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009a00) 07:39:37 executing program 0: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x80c0}, 0x904) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 733.375762][T18201] bond215: (slave bridge421): Enslaving as a backup interface with an up link [ 733.460459][T18162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.488766][T18201] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000730143000000000095000000000000001d93009f4bdb5125164d34fe6706fbbc76762dc3f48e91c5eff06dc1313f13d4777aafbf991512784668cf5c9f9a00c88ec2469c51697adf6c8a9483d2547812ea8583e516141dc69bfa66ee2deae925abc34c008f38d10b1ea8fbfee532cd5e829e8239985832592aa339b31ab9525840a4deb999e733a1f18ad76bc5789c54e29206766dbf82691bbe9941fd0e37af1329122589cefe0563f7edc299e48b1bf5ced696c68642ad3a863801d36a011c81b1071743993129e8d37b852f22eff8b12dba919f55597260feea656b2a0c3e924965"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=0xe, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)={'syz0', "7a7925e639bb30a8292611aca4c951e7ba8ca4a3f11b1e8adc22548dc2ac66a555edf0ba412c36f3c876735b0855f7d673f1a80bdffd9cdb2a5a145b8ed783988a2a1835bd13e47b26e6b69caff987eb0fdad5998794fec7c58a7530f712a9f056f8a5197db385ead8703557f1098e2a2b81320d3d55922e166559e0a95b145e2a0e22ba40c1b6063eb95ca3e2c1a0b0445d7000"/157}, 0xa1) bind(r5, &(0x7f0000000440)=@hci={0x1f, 0x3, 0x2}, 0x80) [ 733.581155][T18242] bond215: (slave bridge422): Enslaving as a backup interface with a down link [ 733.688920][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 733.688934][ T29] audit: type=1804 audit(1599032378.254:1189): pid=18257 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/522/cgroup.controllers" dev="sda1" ino=15809 res=1 errno=0 07:39:38 executing program 1: unshare(0x40000000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x10000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r3, 0x9}, &(0x7f0000000380)=0x8) accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000333002800a000500040000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) 07:39:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000250025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="890000000000000034000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) [ 733.869528][T18266] IPVS: ftp: loaded support on port[0] = 21 [ 733.871308][T18267] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x6, 0x9, 0x0, @private1, @local, 0x20, 0x10, 0x0, 0x1}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000600)={0x0, @can={0x1d, r1}, @isdn={0x22, 0xff, 0xff, 0x1f, 0xdd}, @sco={0x1f, @fixed={[], 0x10}}, 0x7, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)='batadv_slave_0\x00', 0x6, 0x4, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60f90000", @ANYRES16=r3, @ANYBLOB="010400d8000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c00900000000000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) 07:39:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009b00) [ 734.092939][T18270] bond216: (slave bridge423): Enslaving as a backup interface with an up link [ 734.167055][T18266] virt_wifi0 speed is unknown, defaulting to 1000 [ 734.177115][T18270] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 734.275889][T18283] bond216: (slave bridge424): Enslaving as a backup interface with a down link [ 734.288776][ T7] tipc: TX() has been purged, node left! [ 734.298092][ T7] tipc: TX() has been purged, node left! [ 734.338500][ T29] audit: type=1804 audit(1599032378.894:1190): pid=18332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/523/cgroup.controllers" dev="sda1" ino=16147 res=1 errno=0 [ 734.369170][ T7] tipc: TX() has been purged, node left! 07:39:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000400025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e23000026000566d25a80648c63940d0424fc6010000a40020000070200006c37153e370a0011800400001ed1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = socket(0x1000000000000010, 0x2, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000800}, 0x4044) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x3, 0x1000, 0x60, &(0x7f00000000c0)="68940427b49655ebfcc34743122331067267756b1bc8f606a8acb7a8a7f660aeb1e7cd69ff12834de3c64438a835a0566cc4b630734acf116dab311b9fe39932e993f0893c2803d23fecef434d6c4b48c072e412dfd3aab4c2d7373ddf700cc0", 0x96, 0x0, &(0x7f00000001c0)="a582af9fbe461cf4453909798af15ab2235db20f03aa5ac182157586eef41f62172bdb4162dcccd641d6eeb7a2e1c7e357f4824951cb4ba3ed372dfec5881d7452002454c7eac6ef9d282c658e4f37cb5388218c1959e0b671b238351b43054c68b46bc759789114cf50d926d54c53f5119960b6bedb46e454ad88313d11035d87a1bbdf33e5ce5e09c91e543db5ef6171c9addeb762"}) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000400)) 07:39:39 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom(r1, &(0x7f0000000200)=""/138, 0x8a, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170000000b0000000000010000001400020077673200000300000000130000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) accept(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001940)={0x1574, r2, 0x727, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "183f21dfc6e0e49b29da3264c270dd1c0858317176655caa26fea5e22a26a17a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x200, @private1, 0x401}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b5c8b816c26f3aa8146123c7bed7fd89b8973e6ed0e9774bfad7a7d78eca27d8"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c076836ba5fe5da090399ee280df4dbd5d6b771939d693b007d1cd321ed913d7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x13e4, 0x8, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x160, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x28}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x38}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "969495ec76295ecf12c8c5a9af0a4c5a4d87817f66966080b763e268717ed2b6"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ALLOWEDIPS={0x338, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2c}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb33}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xc6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dc2fb7bcc3e15402d0dc95d67406caa56653c947359bee543127bfeea0efa36b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x434, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x490, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @private2, 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}]}, {0x24c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e9ae648b328b647508ccfa4483326e29d48f619253a917b178bcf7f5b956323"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x1574}, 0x1, 0x0, 0x0, 0x4000}, 0x24000084) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x15d4b87) 07:39:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009c00) [ 734.562082][T18350] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 734.578182][T18351] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 734.614383][T18351] netlink: 8958 bytes leftover after parsing attributes in process `syz-executor.3'. [ 734.819538][T18354] bond217: (slave bridge425): Enslaving as a backup interface with an up link 07:39:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009d00) [ 734.860348][T18268] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 734.889418][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 734.944585][T18403] IPVS: ftp: loaded support on port[0] = 21 [ 734.965234][T18268] device ipvlan0 entered promiscuous mode [ 735.053584][ T29] audit: type=1804 audit(1599032379.604:1191): pid=18409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/525/cgroup.controllers" dev="sda1" ino=16273 res=1 errno=0 [ 735.158616][T18351] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 735.191175][T18350] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 735.244195][T18351] netlink: 8958 bytes leftover after parsing attributes in process `syz-executor.3'. [ 735.248095][T18380] bond217: (slave bridge426): Enslaving as a backup interface with a down link 07:39:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005d0025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 735.391848][T18403] virt_wifi0 speed is unknown, defaulting to 1000 07:39:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009e00) [ 735.710935][T18449] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 735.911095][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 735.941497][T18403] device ipvlan2 entered promiscuous mode [ 735.961884][T18403] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 736.258475][T18468] bond218: (slave bridge427): Enslaving as a backup interface with an up link [ 736.326726][T18449] bond218: (slave bridge428): Enslaving as a backup interface with a down link 07:39:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair(0x15, 0x80003, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) r3 = accept4(r1, &(0x7f0000001100)=@un=@abs, &(0x7f0000001180)=0x80, 0x80000) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000001300)={&(0x7f00000011c0), 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x90, 0x17, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x4, &(0x7f00000010c0), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x8, @inherit={0x60, &(0x7f0000000040)={0x1, 0x3, 0x10001, 0x1000, {0x0, 0xfffffffffffffff7, 0x7ff, 0x1, 0x8}, [0x2, 0x100000000, 0x8d5]}}, @subvolid=0x5}) 07:39:41 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000000d540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001100)=""/184, 0xb8}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f0000001300)=""/185, 0xb9}, {&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f00000000c0)=""/4103, 0x1007}], 0x5}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000015c0)={0x0, 0x8, [0x401, 0xcc, 0x3, 0x68d, 0x80, 0xdf]}) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = accept$packet(r1, &(0x7f0000003d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003d80)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000003dc0)={0x11, 0x19, r3, 0x1, 0x3f, 0x6, @dev={[], 0x41}}, 0x14) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000011c0)={0xe8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf84d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33fa0eb8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6c0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6308bfad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d9dc83e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79da4e6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1756bd44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f9ed4e3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x227a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e739b57}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6dedd495}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4479eab1}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x244ae2230d851ee7) sendmsg$kcm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000000040)="2e00000010000523d25a80648c63940d0300fc00100002400200a06d053582c137153e370933018000f01700d1bd", 0x2e}], 0x1}, 0x0) 07:39:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100009f00) 07:39:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x100000000000000a, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff7fc) sendfile(r3, r2, &(0x7f0000000040), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x20000000003, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), 0x4) 07:39:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000730025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 736.667709][ T29] audit: type=1804 audit(1599032381.224:1192): pid=18574 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/527/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 07:39:41 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100736662000300020028000100"/64], 0x58}}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000040)={'veth0_to_team\x00', @ifru_mtu}) 07:39:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)={0x38, 0x1412, 0x8, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x12}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000226bd70c28bbcc3642bd59c033a494924f83de8f08d14ae9c00fddbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000880) 07:39:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0x25}, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x1d, 0x5, 0x8) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f00000000c0)=@assoc_value, 0x8) [ 736.794710][T18565] bond219: (slave bridge429): Enslaving as a backup interface with an up link [ 736.879206][T18582] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 07:39:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000f0025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 736.920053][T18582] lo: Caught tx_queue_len zero misconfig 07:39:41 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000030003dfa000000000000000000000000500001004c0001000f00010074756e6e656c5f6b657900003400028014000b00040000000400010000000000000000001c000200000000000000000002000000000000000000000001"], 0x1}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0xf, 0x5, 0x1ff) r4 = accept4$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f0000000100)=0x1c, 0x80800) splice(r3, &(0x7f0000000080), r4, &(0x7f0000000140)=0x8, 0xaeb, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 736.980247][T18588] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 07:39:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a000) 07:39:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004ac0)=[{{&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/213, 0xd5}], 0x1, &(0x7f0000000340)=""/221, 0xdd}, 0xffff0001}, {{&(0x7f0000004d00)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/1, 0x1}], 0x3}, 0x7}, {{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1, &(0x7f0000000800)=""/103, 0x67}, 0x401}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x4, &(0x7f0000001b80)=""/230, 0xe6}}, {{&(0x7f0000001c80)=@ethernet, 0x80, &(0x7f0000002240)=[{&(0x7f0000001d00)=""/27, 0x1b}, {&(0x7f0000001d40)=""/213, 0xd5}, {&(0x7f0000001e40)=""/92, 0x5c}, {&(0x7f0000001ec0)=""/15, 0xf}, {&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/99, 0x63}, {&(0x7f0000002000)=""/51, 0x33}, {&(0x7f0000002040)=""/233, 0xe9}, {&(0x7f0000002140)=""/215, 0xd7}], 0xa, &(0x7f0000002300)=""/4, 0x4}, 0x77}, {{&(0x7f0000002340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002440)=[{&(0x7f00000023c0)=""/72, 0x48}], 0x1}, 0xffff}, {{&(0x7f0000002480)=@can, 0x80, &(0x7f0000002580)=[{&(0x7f0000002500)=""/19, 0x13}, {&(0x7f0000002540)=""/27, 0x1b}], 0x2, &(0x7f00000025c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000035c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003640)=""/161, 0xa1}, {&(0x7f0000003700)=""/170, 0xaa}], 0x2, &(0x7f0000003800)=""/42, 0x2a}, 0xec1e}, {{&(0x7f0000003840)=@alg, 0x80, &(0x7f0000004980)=[{&(0x7f00000038c0)=""/124, 0x7c}, {&(0x7f0000003940)=""/46, 0x2e}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3, &(0x7f00000049c0)=""/228, 0xe4}, 0x4}], 0x9, 0x41, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 737.142015][T18591] bond220: (slave bridge430): Enslaving as a backup interface with an up link [ 737.198703][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.208445][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.276616][T18597] bond220: (slave bridge431): Enslaving as a backup interface with a down link 07:39:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000180025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 737.412126][ T29] audit: type=1804 audit(1599032381.964:1193): pid=18643 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/528/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 07:39:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a100) [ 737.639777][T18648] bond221: (slave bridge432): Enslaving as a backup interface with an up link 07:39:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket(0x100000000000003c, 0x80802, 0x9) write(r0, &(0x7f0000000000)="24000000e90001000000f4f9002304000a04f51108000100020000000800029001000000", 0x24) [ 737.792392][T18686] bond221: (slave bridge433): Enslaving as a backup interface with a down link 07:39:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000250025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 737.915330][ T29] audit: type=1804 audit(1599032382.464:1194): pid=18693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/529/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 07:39:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x2569, 0x9, 0xfff, 0x0, 0x4, 0x80000000, 0x3}, 0x1c) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x1113a80, 0x4) [ 737.977299][T18698] IPVS: ftp: loaded support on port[0] = 21 [ 738.094763][T18698] virt_wifi0 speed is unknown, defaulting to 1000 [ 738.343213][T18718] bond222: (slave bridge434): Enslaving as a backup interface with an up link [ 738.416926][T18705] validate_nla: 9 callbacks suppressed [ 738.416935][T18705] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 738.498399][T18743] bond222: (slave bridge435): Enslaving as a backup interface with a down link 07:39:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a200) 07:39:43 executing program 3: syz_emit_ethernet(0x8a, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a46a2f", 0x50, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@hopopts={0x4, 0x2, [], [@hao={0xc9, 0x10, @remote}]}], @ndisc_redir={0x89, 0x0, 0x0, [], @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [{0x2, 0x1, "5d8d7585c5b4"}]}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="bbbbbbbbbbbb87c719ad585291004d0081000000080045e4005c006600003f0190a478ac141411ac14143f00881193ac771d7f7fac1414bbac14140bac14142894040100440cea916401010100000006440c9e5000000001000000040000000f009078c3860000a21fe9d0dbded048995eac6be075e499f8edfc4a70bc29c87a6c648a4d317d3369aacba2516fee073ee71d209b1f1542df5fa47688cba3c43e33b1c0ea1661f626570fa932f2425fe06db88cde66ddab19da8b1b6125abda6ef3551e2f2878e2fa5fbc88402d2f18bfb957adb1731f953ae99273dd4311000000"], &(0x7f0000000080)={0x0, 0x1, [0x228, 0xaa0, 0xe5f, 0xaee]}) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000a80)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x648, 0x260, 0x260, 0xffffffff, 0x0, 0x170, 0x578, 0x578, 0xffffffff, 0x578, 0x578, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x170, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d2, 0x4d5], 0x8001, 0xd0, 0x2}}, @common=@mh={{0x28, 'mh\x00'}, {"dad6", 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x81, 0xfff, 0x9, 0x0, 0x0, "787f75e6729bd9b79a0c60b1983ed4d98b5b22d8fd67dedf6b12ab4fe4346b7eab445d2e865b581b0c55188fa9d70e5542fa9f5989afd74cd1cf1f05bfdfaf9c"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1e, @ipv6=@private0, @ipv4=@broadcast, @icmp_id=0x67, @gre_key=0x101}}}, {{@ipv6={@remote, @remote, [0x0, 0xff, 0xff000000, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffffff], 'sit0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x5, 0x1, 0x8}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}, 0x2}, @common=@srh1={{0x90, 'srh\x00'}, {0x6, 0x63, 0xf7, 0x1, 0x7, @mcast1, @empty, @private0, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffff00], 0x40, 0x1000}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@broadcast, @ipv6=@mcast1, @gre_key=0x7ff, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x101, 0x1, 0x1, [0x9, 0x8000, 0x943f, 0xa71, 0x1ff, 0x3, 0x3, 0x1000, 0x3ff, 0x1f, 0x5, 0xf5b9, 0x8, 0x81, 0x72f, 0x1000], 0xa}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00'}, {0x9, 0x4, 0x2, 0xfffffff7, 0xffff}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, [], 0x7}, @ipv6=@dev={0xfe, 0x80, [], 0x2b}, @gre_key=0x401, @icmp_id=0x66}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x1, 0x4) 07:39:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005d0025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:43 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f00000002c0)="b33ae22fc889cbace4bcbd60dcfabf91502599745eaf0c8167a83f6124df7c9649d32c93a8c08e6e0621fd8efa4afa6de56bf019417667e4e8d96581e2edde1ed5db565b848c74aa56fde84b6103e3931f1c41ddc554d3691252f788280d715f92adb98493bb0dfd06b9eb9475a84128a72f88717d1a98431a3ee0e761919a563d2d44eec04976995ae543b60855bcba5f123e3aa97bc9da979be0848df29a6f494edc0608058bf53098898cbf3b78e3fe1e0ff97ddf8889b7fdbbb24f1a23a2a09c1b467ab4529150dd19bb1c5bc3b7f5a34e9ac7f5b3b8b8889c3b", 0xdc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 07:39:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="8dd71a5e1c094da4d019afb33033", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002940)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x101}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) [ 738.765297][T18780] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 738.800308][T18782] IPVS: ftp: loaded support on port[0] = 21 [ 738.861559][T18698] IPVS: ftp: loaded support on port[0] = 21 [ 738.913095][T18783] bond223: (slave bridge436): Enslaving as a backup interface with an up link [ 738.928433][ T29] audit: type=1804 audit(1599032383.484:1195): pid=18825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/530/cgroup.controllers" dev="sda1" ino=15764 res=1 errno=0 [ 738.964863][T18782] virt_wifi0 speed is unknown, defaulting to 1000 [ 739.031313][T18698] virt_wifi0 speed is unknown, defaulting to 1000 07:39:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a300) [ 739.120759][T18822] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a200) [ 739.163432][T18783] bond223: (slave bridge437): Enslaving as a backup interface with a down link 07:39:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000730025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 739.347050][ T29] audit: type=1804 audit(1599032383.904:1196): pid=18865 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/531/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 739.462821][T18878] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 739.638323][ T29] audit: type=1804 audit(1599032384.194:1197): pid=18868 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/500/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 739.774123][T18882] bond224: (slave bridge438): Enslaving as a backup interface with an up link 07:39:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a400) [ 739.849522][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 739.912693][T18927] IPVS: ftp: loaded support on port[0] = 21 [ 739.936353][T18882] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 739.974899][T18896] bond224: (slave bridge439): Enslaving as a backup interface with a down link [ 740.056664][T18785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.066170][ T29] audit: type=1804 audit(1599032384.614:1198): pid=18940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/532/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 740.170837][T18927] virt_wifi0 speed is unknown, defaulting to 1000 07:39:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0xa0, 0x5, 0x8}, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00', {0x2}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x9, 0x7f, 0xab, 0x28, 0xfe, 0x7f, 0x8001}, 0xc) write$tun(r0, &(0x7f0000002500)={@void, @val, @mpls={[], @ipv6=@generic={0x0, 0x6, "09c091", 0x8, 0x73, 0x0, @remote, @mcast2, {[@hopopts={0x2}]}}}}, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r2, 0xa5, 0xdb1, 0xffffffffffffa323}) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@remote={[], 0x3}, 0x3, 'veth0_to_bond\x00'}) 07:39:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="00000000000000000300f1ff08000100753332"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r8, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffff37, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x0, 0x2d, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {0xfff1, 0x8}, {0xfff1, 0xb}}, [@TCA_CHAIN={0x0, 0xb, 0xff}, @TCA_RATE={0x0, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x0, 0xb, 0x5}, @filter_kind_options=@f_tcindex={{0x0, 0x1, 'tcindex\x00'}, {0x0, 0x2, [@TCA_TCINDEX_HASH={0x0, 0x1, 0xba52}, @TCA_TCINDEX_CLASSID={0x0, 0x5, {0xb, 0xc}}]}}, @TCA_CHAIN={0x0, 0xb, 0x1ff}, @TCA_RATE={0x0, 0x5, {0x0, 0x3f}}, @filter_kind_options=@f_u32={{0x0, 0x1, 'u32\x00'}, {0x0, 0x2, [@TCA_U32_DIVISOR={0x0, 0x4, 0xe7}, @TCA_U32_CLASSID={0x0, 0x1, {0xfff2, 0x6}}, @TCA_U32_INDEV={0x0, 0x8, 'team_slave_0\x00'}, @TCA_U32_POLICE={0x0, 0x6, [@TCA_POLICE_TBF={0x0, 0x1, {0x100, 0x20000001, 0x20, 0xdf47, 0x3, {0x74, 0x2, 0x0, 0x7fff, 0xfff4, 0x1f}, {0x5, 0x0, 0x60fb, 0x1, 0x3, 0x5009}, 0x5, 0x1, 0x5d8}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8000}, @TCA_POLICE_RATE={0x0, 0x2, [0xffff, 0x0, 0x8, 0x80000000, 0x101, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x14, 0x7e, 0x2, 0x1e4b6f19, 0x4, 0x9, 0x1, 0x7, 0x401, 0x2, 0x9, 0x3f, 0x6, 0x400, 0x4, 0x81, 0x9, 0x6, 0xabe, 0x1, 0x0, 0xfffffff9, 0x0, 0x1, 0x9a, 0x80, 0xffff, 0x6, 0x1, 0x1d5, 0x26, 0x3ff00, 0x400, 0x3, 0x10001, 0x2695, 0x3, 0xffff7fff, 0xffffffe4, 0x3, 0x7, 0x9, 0x4, 0xfffffffb, 0x1, 0x20, 0x76d9, 0x5, 0x38c3, 0x3, 0x5, 0x3f, 0xb565, 0x2, 0x1f, 0x10001, 0xf6, 0x51, 0x8647, 0x3ff, 0x400, 0x1, 0xc386, 0x10000, 0x401, 0xfffffffc, 0xdf, 0xffff, 0x4, 0x9, 0x3, 0x8, 0x0, 0x5, 0x80, 0x73, 0x0, 0x9, 0x4, 0x0, 0x3f, 0xff, 0x400, 0x6, 0x8, 0x9, 0x0, 0x99d6, 0x80, 0x100, 0x5, 0x5, 0x0, 0x8, 0x800, 0xffffffff, 0xfffffffa, 0x2, 0x7fff, 0x3edf, 0x0, 0x7, 0x3, 0x0, 0xcadb, 0x1, 0x3, 0x4, 0x3, 0x5, 0x53c4, 0x4, 0x3ff, 0x1, 0x182c, 0x8, 0x2, 0x2, 0xfffffe01, 0xffffbc45, 0x7, 0x9f5, 0x4e, 0x7fff, 0xef, 0x4, 0xffffff01, 0x702, 0x0, 0x70f567e8, 0x81, 0x5, 0xf0, 0x7, 0x2, 0xff, 0x101, 0x7, 0x80000000, 0x80, 0x8, 0x3, 0x9, 0x2, 0xffff8000, 0xf392, 0x2, 0x1, 0x0, 0x8, 0x3, 0x100, 0x8, 0x7fffffff, 0x1f, 0x8, 0x1, 0xdf17, 0x8, 0x1f, 0xb600000, 0x7, 0x7, 0x4, 0x3fd, 0x4, 0x5, 0x5, 0xcf, 0x6, 0x2, 0xffffff01, 0x1, 0x10001, 0x3, 0x9a1, 0xfff, 0x57, 0x80000001, 0x401, 0x7, 0x0, 0x3d, 0x80000001, 0x2, 0x1f, 0x7, 0x4, 0x2, 0x4, 0x6, 0x8612, 0x10001, 0x7, 0x3, 0x10000, 0x101, 0x80000000, 0x2, 0x6, 0x9, 0x40, 0x5, 0x7, 0x5, 0x10001, 0x9, 0x1, 0x8, 0x80, 0x3, 0x6, 0x7, 0xfffffff7, 0xe14, 0x6e46c9a3, 0x6, 0x7ff, 0x5, 0x5524, 0x3, 0x2, 0x4c71, 0x0, 0x8, 0x3, 0x1f, 0x1ff, 0x0, 0x10000, 0x80000000, 0x800, 0x2, 0x8, 0x8, 0x100, 0x4, 0x1000, 0x4a, 0x5, 0x9, 0x7, 0x1f, 0x7, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x7fff}, @TCA_POLICE_TBF={0x0, 0x1, {0x7ff, 0x4, 0x8, 0x7, 0x0, {0x1f, 0x2, 0x4, 0xff7a, 0x7, 0x7fff}, {0x7, 0x1, 0x7, 0xa5, 0x535, 0x20}, 0x1, 0x7fffffff, 0x80}}]}, @TCA_U32_POLICE={0x0, 0x6, [@TCA_POLICE_RESULT={0x0, 0x5, 0x49}]}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 07:39:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000fc825013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="0786757cf3c2b2c4fcf31fb6db896b6e0800000000000000"], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x13b, &(0x7f0000000300)=""/220, 0x0, 0x4, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000200)=0x14) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x0, 0xba, 0x3f, 0x9}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050004000000003c3e9fe98cf21b000900020073797a300000000005000100060000029700000c000780000012406000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) 07:39:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a500) [ 740.522928][T18969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 740.582378][T18976] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.623798][T18973] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 740.659649][T18989] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 07:39:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a600) [ 740.764676][T18983] bond225: (slave bridge440): Enslaving as a backup interface with an up link 07:39:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x1000000000000010, 0x80802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x30, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032cbd06000000df25310000000c009900ec0100000400000008000100416c0000"], 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x804) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendto$isdn(r1, &(0x7f0000000080)={0xacf, 0x101, "edd75de6ba80778488fb58a777191495d5df01c72a4836eb26cdbade383b0eb5e162f5b73412382bec515532bed8b55cf1729f786e831e939ee6b224fb0e3b5b278e471bd058d69f5c788d04ee9d4a96b43879b1d5786438bd5d09dd9db5d2e5dd675800df95584d5a498683"}, 0x74, 0x4040800, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xff24, 0x58, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$isdn(r1, &(0x7f0000000100)={0x22, 0x81, 0xf9, 0x8, 0xb5}, 0x6) [ 740.849869][T18969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 740.905343][T18983] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 740.940451][ T29] audit: type=1804 audit(1599032385.494:1199): pid=19034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/534/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 07:39:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a700) [ 741.363105][ T29] audit: type=1804 audit(1599032385.914:1200): pid=19050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/535/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 741.594863][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a800) [ 741.695176][T18992] bond225: (slave bridge441): Enslaving as a backup interface with a down link [ 741.742509][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110400013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 741.809287][ T29] audit: type=1804 audit(1599032386.364:1201): pid=19065 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/536/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 07:39:46 executing program 0: r0 = socket(0x1e, 0x4, 0x0) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600), 0x0, 0x0, 0xffffffffffffff6d}, 0x12100) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x10001, 0x0, 0x2, 0x81}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000041c0)={'wg2\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000065c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000080)="dcf35f2017006f4034cbfb58f555fc6c943d4f150acf15c09b99706be5df160e513bd963385d4bec8978c205d4bf1f4b406cce64dcbce101d042b923e49dc3feb4de2d97e06526db98d9605cda2d3eb8bfc9679d8904029ed69f1f94a4ed603e4fef7f331979debffcd811582f0fdf724386efd0f1f2a7fababd30160606fadb5dacd6b0df27", 0x86}, {&(0x7f0000000140)="b88c67edaab10addc33dfcb4a04d8bf48d0202ba65d9ef11dbe01f4c3562a8e9f885d6efbecbda2cbc62aad6f3af3e44b1e978b88f73a661273f0767cd5980f0e95ffe37dbe13411e62d5a3f6ebc12ae1c50fac7a687128e6cf569951bd525244bc3de3866125f7c160cb26dd84811937092507fda5e5df0efbaf41e5071f34361eca02b141d21e8a39facf49dc5558f4ba192637bcb701bcc63415fa99585c400d2c47b65e42aa16a7670f3788d6c1b197673bf02", 0xb5}, {&(0x7f0000000200)="fb2f91c8d917a01d7e72087455f084fc2520b277c3405f906a2f1abb5c51589a8bc90a5a8e633947bd5156bcb37c5f4293d76ba7cb07bef959386a64a487c8ec5607b4435f04514f49b9bd69aa9d3a33128b822a", 0x54}, {&(0x7f0000000280)="c912faebd778531cc21df253abae63782d370827161c9a397e08e2788cb05840dfde43e668261e0ec34da7fa0d587b42dfdda7ecf0e19f1983ecab2c56030040370aa0f823213f8a499dbbbab10a238832e2813539855c0d7f3b98ddb7aff3ff2b0a3567035aac7c10b3f923b8c36a2e79a3f368068d29f26be4ca908e53b6cbd9a04b3bc60d249c7062d09ec3e67a99edec873471f869478b61d2b8306b0740804a8846acc9a4dfd6f9604bfafde010eb0bf4dbe8e7369bcff9c51227ee7aeb89114085fc9adccd785c4537b2e604742a8cc2256fb8c8e696eaa1d3d96f4ffed2b7", 0xe2}, {&(0x7f0000000380)="d3c2cd9b1cf60fc8f2b89036bb5f0c2a84efc835babae4702560d593086d9e5a2ca8521861aa6be750dda0bb2a6fd419153013e629bb", 0x36}, {&(0x7f0000000480)="4d39184cccad14775be928fe3bfcf26b705419f13672f647986195b31d99ecb45235000ff4aef3eabdfdc55a9c8a535bdeb5f8c3728da2d42b1d4d87996f5aff95171634e43c9a12756ee8605be5121958ddf7b0e02426ce35d938735dcf176701afdf621bacf779338a1aaaec325ee8d3a7b4399e8316a74135829dbc100d7ff829b53de74fdaf90af8b481cb67d306912c8b4328c1acbf2821f6e3acce24420e73807e5b74b64645268b8aed", 0xad}, {&(0x7f0000000540)="e1be4c75b16b991abbc47018083ad5783c94c0cc1f25a13a28e4b2fa2b017c6ef513ffa57ba39d1afe6338118cea88565fd3aaad2f1e0e3e6143c3644c83be88c57d530510e1f44bb1a5773814212f27af6e0aeb442b316b6ecb9eaf33150bbbe794f76aa3896091d69e7c0069e2c7f9296aae515c9b177d1084b89c6761f8f105a27fbacc5d589024f00f51dcc78c5b3ea8c8f3af4906f6f1", 0x99}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f00000003c0)="d8087d736bec88f270404eda90e4ca8ba9f04e4c9b69b560eb3f1c101e6427f98e26076e5ad1203dad936d53036a6ea3fc9476ab300d6cd105ea9741bac7bc9842391f60553ada628cd447afa50106d5f90eb01e46", 0x55}, {&(0x7f0000001600)="b233e0ede97abdcaeb60d3c37cd2614912561f4c19f4e136cd267b73ec2cf7ad1a2679f01505ea222af354decb629864457e36adf7acc1652f4e8a609c613fc6a127d01400815b2b5641789f590f51c1edb3feb467b4a95787b0f1f0dcc4ba457f04f94bd5279f8e1f5ca09d1bdb", 0x6e}], 0xa, &(0x7f0000001740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_u8={{0x11}}], 0x30}}, {{&(0x7f0000001780)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002b40)=[{&(0x7f00000017c0)="fb0e75f96fce2112c45d954f699398b524a5d80f80aa8cbafdeb84019497f002b52e08f9a257c72f466b65eaad38927ed3b153e83b1d46d2fc03fdd0d43ddd8d8de32409a3271acd8084851bcbcfb16261b92db3498967960f8fa11da67fd8d27b4a697cc91e77d2ff300f55b49fc75ebd9e16c43ccd88ab29649ef22e5e6b4e50866cefd93f85708bfe1c", 0x8b}, {&(0x7f0000001880)="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", 0xfa}, {&(0x7f0000001980)="2a9b1eadb7eab93ccdda195b958eef261558f10219c09b294e35c0fd892190cf70a3196199f4df8169c97ba81074af", 0x2f}, {&(0x7f00000019c0)="039a69e2e607d59e6440079d9753a0be2af4cdd876034ef1d2030b639687f0a478e52ed4565f0fc88111207704ff0b081f22a57cf5ac8adae5abec8b6a0a45286349e0", 0x43}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="9126f1c140c7d82f540254adb0bdd1356ff8dd36a9df89d993b0e6192aa443c9c4c3e8b0061db672e475a329a4b1b84b53653b3dc1ef8095cac681944647655ccfb3ccbd0936ae0325196ccb1482c58b787f3297a2b1a26ec5bcde0cc7f8e349d3fe7c0fd92290c58e743930d576d6c9b627bf1e704094be054857020cf7b194d45802308600bc26674e1a661064642b043c2a24c50b22327e5f96b0ae70ff63c61be2cf180ea4872b8a8a43d308d880e2c694a76858a748ab686d409ca91c26753b", 0xc2}], 0x6, &(0x7f0000002bc0)=[@ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x52, 0x1, 0xa, [{@local, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x15, 0x1, 0x3, [{@broadcast, 0x4}, {@remote}]}, @end, @timestamp={0x44, 0x10, 0x48, 0x0, 0x5, [0x0, 0x101, 0x1]}, @generic={0x83, 0x9, "aac32d46f738c6"}, @ssrr={0x89, 0x13, 0xf4, [@broadcast, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @ssrr={0x89, 0x23, 0x4c, [@multicast1, @multicast2, @loopback, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1]}, @timestamp={0x44, 0x18, 0x65, 0x0, 0x6, [0x1, 0x4, 0x1, 0x1, 0x74]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010102}}}], 0x118}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002d40)="bff1d5a024674f42dd7e5015ddf9b4fadc8f1b78103fa1e2be0dd1870d3644c7fc88af5d46c41b2dbc152bd27a4af2aca998baff33990b6da56d3ef4146014eec7f312ccc72bc6eb806d4f278037c7295516a3cbf8b5d79e", 0x58}, {&(0x7f0000002dc0)="3b3824757c021dc5d13a211fd22dd94504d68a9b28f3e16f258185976d74236d2c79f6e799da6ab98054b9c3c79b06e66d041781a8768bfed8ad340dbc35901716de88695ae38941cebbf2c31f36a11b8f80fa5badf3a41da3b26f1ba19bedf6f3e4e70e1e30420ee03c63826ee753c43b64640609aad784c72926b069756b0412", 0x81}, {&(0x7f0000002e80)="3db511cadb429b49695dadfcb444b0eaa0e1239a693a71d61ed8e1d3072a5f8c2f0dc7e850004c58801947085d4eb0778365b7a26a747d6a80c8de3b777d2c141b0a40f3477c4d69c5a7ca3004056ccdf5766d87122461a7eb45cabab2fd05d43680b1713ae2f92db3d6fe1587a07cce558a7110384103", 0x77}], 0x3, &(0x7f0000002f40)=[@ip_ttl={{0x14}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@end, @generic={0x82, 0x6, "5ca627a5"}, @end, @rr={0x7, 0x13, 0x96, [@empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp={0x44, 0x28, 0x9, 0x0, 0x5, [0x3, 0x1ff, 0x91, 0x3ff, 0x7fffffff, 0x0, 0x7, 0x7f, 0x7]}, @ssrr={0x89, 0x2b, 0x71, [@empty, @private=0xa010101, @local, @multicast1, @remote, @empty, @local, @rand_addr=0x64010102, @multicast2, @local]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x2, 0x10, "19df42ad4e5dc4c22b290bfb139a"}, {0x5, 0xc, "10479c2a05a65e58e145"}, {0x3, 0x11, "a6e2c41307a1cf11164e20e99fd6d7"}]}, @timestamp={0x44, 0x14, 0x1a, 0x0, 0x4, [0x9d, 0x7ff, 0x7, 0x1]}]}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003040)="4707fc96d344a1342774477ca721d58d476011349f9045f5b6e2c986291b903bbf1d0b6b1d", 0x25}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000003080)="26a281644287252d", 0x8}, {&(0x7f0000004100)="059f38ad749242510108537443b48d78c6c419217cc9e797fb1a39fbda1f5afb476508b970d584467b0c490c6acfc858b5c5dde2de689836872a304f623f52a271f9f538ceb54512241d3c9280aa61f5d7ce8a366fe7f5a19b708bb5c3e67a15d5155d21fd50c905c27d9e8fe378733b42a4ab91e3d186a58f6da1", 0x7b}], 0x4, &(0x7f0000004200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0xcd}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x2c, 0x0, 0xb, [0x80000001, 0x1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x3, [{0x6, 0x5, "e61087"}, {0x1, 0x9, "64bb1f43a05bab"}, {0x2, 0x4, "2cb4"}, {0x5, 0x11, "a4ed090168e908a56a637b0f5f4c15"}]}, @timestamp_addr={0x44, 0x3c, 0xb1, 0x1, 0x4, [{@rand_addr=0x64010102, 0x1}, {@broadcast, 0x2}, {@empty, 0x7}, {@broadcast, 0x9}, {@broadcast, 0x8}, {@rand_addr=0x64010102}, {@multicast1, 0x2}]}, @generic={0x94, 0x3, '\"'}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x6, [{@loopback}, {@rand_addr=0x64010102, 0x47}, {@multicast1, 0x7f}, {@empty, 0x8}, {@loopback, 0x2}, {@broadcast, 0x10000}, {@private=0xa010101, 0xffffffff}]}, @ssrr={0x89, 0x13, 0x79, [@local, @loopback, @broadcast, @local]}]}}}], 0x148}}, {{&(0x7f0000004380)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000064c0)=[{&(0x7f00000043c0)="5a7defad4382ae63d3654766c53a56a57bbcb387106ba5192c580a758e296d3694c77245229882dcaf89b4b8228d554e9544eaa84ddce73cf26bc2aca8abf57d5e7874f559b51b8a75a229dfb6ff436afb32367787ced20ce3fc2e4d574e849e22d57fa5b3e459f3306ada40f54a0627c4a9b1155921ff7bfef5c28dab1f046665af", 0x82}, {&(0x7f0000004480)="772b1cae78662a115059e1cb1c2732d46c0b850250ef8723f0a3cdf7c4107c8457d1285848f5cdbf47dfab15d720c5d4e3764dde34c158c911b64428816ba4d397a4718aee9ab62a8550d267e93ec14e105ed695a78e39a63a14730194d4991e0b9cc2112ebf557439bbd4f58c34bd885d55cd01f48596df362224f3b593c631240436bbb3d8f28107141066d2f12bf0e72d4046a5ecedf532dc1e5d999f7585875b6a758a8e1af1e234e7d28636228c5daad293fe5fba1a7104ff12e27161c78361669f483abc648b43be5e5b1e699ab5ed822da07f075f857be3420438c62e072431cca3bf35a00fcd580128e9e5b7dd96b4af9aea77428fe5f8ddbf0c3575148d5a5c15dbd3143e43f595bced3ef725966fbd0a23546b65c8b8bd0a48dc90486d0824e9ed93742df20cb600697be0ff6631746de3b40782d087fb1e2499b65f8a3e718710cc61a869b0cce73b3b98c07058c2073eb531e47840973dc94b59370a89239a673c554d049e0602138c3299ef52768debffe2ac0cdd67429b521ab4c0bfa7c2c17c13288484369b41c562e83e1d4c2c6251f947042d85cf6b3cade49e6c3549c3fcd118d132a05346b11d0fc9d3e5b8dbab99335716ba9a37c6ed24efb6628742255189a0d318c33e8008dc41c5748c07c332e40e9d3c4e0961eb4919c1e774064541b52bf69ff68c4931d3205189d6184e5e0d456220736d0b7e3aba463e64520c0597dd7b3cc76859125d5080c51fc1837e0abba26d09b247f312b00c11e7e9da54aed0c4eaf381d0ab62545104523745e1f8cc14e136a51c5f39f3969c4faed8ff0daa9431ac337ebab5da88333315bcec660ecf5ff679a6b3c4dd1fd0283150058bc5435cbe6f9eb864bd0dda12218a2df91bfc62167f97e304c2479b6b5bab47c25822b48808703691029ff3691a8a8ec96dac05a13f145c0659c90ce6e38cd74a1a6c17c491ba4d0cba3314c4826a36e68cd2c674ec65bcbad2db02a40e4fe555084da3ee57c02443f1f0abe81d225b73ad9389ab896fa50d13fd784c7f88cb46f4746f2d7afa4918896067d461fb771dd488903f6c11d08d3e96dc18f1093093f518e85696fa68280c4d449e1f6d7d0a96f05dad2930dd73c3efc900db250fc1c81afe8c734cfde194ddac91ee495fcf9113c923baafd7cf9421f4c487d754af51ce3dca1c5dfaf5eea23186c6f067e50587543de2a9924810369d0f0629fb305ba48b4d3470cb4a349a29f37d9cb5ce44834da59b00e7266ce1f7c7a696b81f05d1fccb915f97493537b57f20622d174a5340d922becfc0cf732704357c32f87a3a9340ddd8d4cc5e1bd14a9c15704f8ab1aae110eaf25895ddce7b00d8b73b8492d5da011fffac0d4869eea4f0fcf13370903e417275e50299b36d65314adff7e32fca71eb58e42b602ada9e78d0d0747a43db6a27dee885bfaa2bd03314484f74dcd7f089219a61234fb7c48b3d88a9afb2201d841e58df6fd487c370f61eddafb39c2e310c1f39377cd0c40d0a1e5e046807ee5f9617a37c51b3d62ffe8ac63109556cec83f8211df70d12e6e49a117242aad59a97b43b2d078392cb884560424ebc96f406e3c9d5565f928434b6d2c8ae3e9528837b56468213ced14b86932e77cf7546633c7771342e0c888f8534e608a2e8f1998ae0d18663571f70d7ac7b007358dd74a94803a63cc022e241c7d9310de6909db2ec2e44029aa1a03592e6701a7fc84faf656ff0f0062dd1d337e6a95572e423c1f3a8b4c499ebb25413e8f898ae77037784f602cdf8f3fab88cfd856fdecdf2b1ad37460d6775c3eb3c8b3fd595b733991b99832d950719a01b16e9c83dad44f47563c85d07a9e045d54d9e0ae141c710498a57f2a91ee4a4b2675a3c0bd33f201cb283fb598f54ff92ce32e30238781f770a50b3af4e4dd213567076673c79c28ffd36e8174379dab3fac8d8a53ec2a30180cb26f010d51e36bef077ed7368c9d392d63185a245fcd1d055228b9209175903d7705c2da1dd995c52317e4d15f75d6c35bc056137e15371b024ffe3e6882d11574d53bf04765f00b8e21ceb2684e0e612ac66bb523de55327657eb2dad24d1622c19f5070e5b9e08c0b1a66eebc915c379786bf4dd6a533b23bb4092e58f9a827d427c602fda753c21b577e38d3ebacfa38492aec74f3203e6248b39a50cd7e81e322d7c44d9de76c4fbf870fc977ea1483054d429e33f1f1eae83c59513cde516c4d039a13b5668be07c5626caa9fcf7bc23f4fedc88e231cb2864b76a80478d21742a5fc87ad6a99c0ae020fdde213621e7c3969d47ef2e610089d7dae5deb4fa7354cc238a661ae65cc396a112d6088e97e72fb3cde95a1ea9f993a1004f639a3f8fc0a4013ad8438121a9ac94aab6aea05bb8670ea3b2bf1d02463615547948a3eafb4953951c86be969722b53494ea19db0565b8adbd4fd622cef05a3645a5309a7224069492bc8d012e3018cf29f193ead6031330af02517ea2652dc68a441f154482bdadd59a2c4e930e2a7f0b7ff4979eae78a8c61af9cc2881d691e9bb5b2b6cb44e242d24f3e565867f12811b85c30d57340d01ec170f37753867da1ab1d7207984dc4663ce0bfe4df9f0a3ea570057adfcaefe3a5880ceabc0abcaefb01ead8ad90d5110991a1565a1c754f49737159c54b9ab3f543e793b96624ecb280164b2b430b86b0e447d4c3dae3bbba35499a2702870fb2824d3e02b6ac9b2ad7b8be11b282666f2e91ab053844bbd29938f5372341dda7bfa4021b6e55e65fcee2eccbe7f191afb97c4d5334b3d908b1dc4af431c6ec1c4803a99a3805b85fbeffa3b23a825aac23feca1823068cb47769743f55bb61d4e97198734f03f861f34c86f6066622e4f6775ffd2638290a557f798f36dd1d47e13d6c12082cd5f3ff80efdaf308be3051f500967e83e5076ad6952087589abd7cdb8b39ca2d4206cf5a8c638c0191c5306cbc9d270fe60d9ffaec5ad3717fb6cfc64f7f521c5cab15afeff01bec956b89053ba58bbe4141a9c93a0aa17709ac4336be3e423aa77cb5c85b283c0086bc76307f026abe654186b9f97a3a61aa0a86895ba2b8e1a89be3e684f08fc09ed524fee7ddc2326eda6ab5813c34cf44ecaaa539af7e1a6c0e7895b092a1cd028ba9bf71f43ec064629938c75bbece01aa3d271aab3e846b1e557404e155e02cb845b224d70ab0ff26c2aa3c8257ec7cfa456e0ecf1e5caa75a081a997dcd9f373ef843ad32eb9fe0e1d79cd61212258030969e8a544bab267aa1a14a2e0ff4906b15358bf5b56ce63b445dc7ab6c7f6206d30fab40ad8e6feae9d26fe69a3217ad05fed082c693670b42f9bcf7e7c26b9af56cf98f5db41e761e816b7283d24349000b8e7701a1b962500976a7c8d8c222e111294b41763f408750e2c4d83c63802abaeaf5653f2f3ad9b4b9c084ad207afed9405800c6982b39e52473ea09e9aca7b58fabcf79728a16eb64fd0636616d20faae29a613d60b53353221155d8d69e010f5614bd53df8fd25afc2d65c246734d78e8292b82f478d4641a67358ef5e211fae58efa3e9057ff9b077855a2aef583b4eb7395dbc6ef70cbef04be4bab8be0634713da3f43ae95b8ccd9ba71b317f19fa9391509bcf0fa35a552c2d2117f56cd2d692dc37433f50e5669cd1b911a6afd90c513a68d535808170d11742a1f27592dba878d5e5822dc7ca9cb880afc68c32c1c24db29cd4b159225a1512d30ff53e5d12ed59766db675d9445850561fc22b114461e0b2714eb8a733abdde272ea79128a91ededa9d959584e84133038dd578dc986ab25e3a0ec7adaa1002646c8abb057619f97dafe925b8ae576e6109fabb1719a2acc8815ed22c75ceff2c0da53690dba2d729ff4e04991af21c1d4c4f4190cc2a19a7db0a870cb4123886e25fe3968e6d19ae625eae7c1140057f4dc4b3d737962286dce02ac8073ac79ddd51871dd270467c70bd00ae59aaf640c59fd1517fd8a7d96f385a99ec362b7299f5ce799d77a2f5b855f463646d1f4889f20bb1c43c18f838e65436967561433f31f851b43a69378fea5ff37a1bb9982df6778a650d3deff1baa946ad4f779f273bf1d60a22e8a38aac46c48da45a971994a89093868fb17b8e484cdd4c3668cabb7e07e2a9c251038f9252795b2b1f21d2a26a0f97cd6bf18bff48a6631192e095f1e203192ed1e9f97d33d453bf6934057086575d8be184571162dce2f77f19f16ac522afd7ad5ffbdb5fa8a7fd003ea2694e04dfab4c381b8b886f5304b7cbfb95a583bfd7a4e37712d1decbc2262af7efeff00120a7f0b98d4f1aac0a80d84871ab6e5037813d1cb08e3e2e0cd748bfebe84b333589cf92ce66772038f7402bb49ea55f688a346b65c05c22a978fb721eea0c91f08759c2bd39f25a5f21437f80f5e064940893405eb9d9356ae5081aa59e3d7b29e9f36eef0e4f15a7a9fb650a41b9b8bbd3a8ce9463c85067693ed07506efc723e2e9200f09969f13b15446fdc66407ba74bfc1e815586e5691565b7081be600d2a591a8cb3c6a36a42785f9d39f76dfff0387e35cac0b15f7a661ca216bd2ce669f78c2f1e84f184aecd19d69f6bfeb46758d1eb56e7d254f391db15a0d32dd6ec88ea6f061d86cf1ba7dfdb126cd3aa38e1dd9073c99266828d34c83e00361e01a3ab14bce1d1303ea0d60d5609f97ec09126623ba6791d147b835f8b4e1b18b8e00f49265d2d4a1a8c7f50c79b226d24c7c42be958834d753681bc70c8cef73384cb6819d294b99bc8df18ad57164062d5f83ece7a07c9acf5f746b88c12eb60e8be1865e4a0d348468f28880e73e79a96f41d38a935667d39dcc67a2a61921b0c03687099e3c2f16efd4a028e82ccdc38dd936376b5e7ada35ff8c2027cfff35b14087e9ac9b195d35ebd24cc27979d04a91e06df803b8838efda0237254df1bae1b4d30a384086b657e2bc49a5d061164e50acc2ef98ae4365ba6a25eba03fe5a12ec8a32e3b1faf1fe2f85aa57eda7c2b3cd8513895f0fe4a39daba2a4f9bc4d11636d6db3557187f26cb573f18080b10dee900a14a6434216c54b385db0327b2893f2e9de82715d658723b15c878b4cb6ef1ce4a2d88cce5cd5597367ea540534c9b4c5d4b1960dc2730309063daba97ad46e5a4bae493b8bf08ae87ce411c6347496a7488a1e56792b508c3a4288da94c4683f1782c08227773cb440da72d655a9468e22ca698ee6b7bc992ebc67661c3b4a3436cbe738de746a47f1a169ef60785bdc5d72b1d3455e92696859343b9dde1b3f5aec9a088fceaaff6019afbf3b75d2c772a26fd333183bae2f8e6b04f458d3371a17f572b6ec2736d98b9911557f74be690ece5413c1e61d0606001ddb68736f9cf917b2fa1915867cfd7f4f8ef038bcb8b0e409b742148aa2a881a0a9bd6e826459b63ba95d3f83d991f942a3f63ea8540077e0ac0c85377ed33e51319711173818a022b873ba01202515313c17c789d65d55898082a39317f5072d0c7163da2efc85e291a37764ea20785df448f2815d36bba910eb9022d485f677eaeedc27798f43534f2e0c0218c9437d6dfa973ce0bf4ab68fa02a63868c57b595eb327b6576338556f243ac0d67081ee8b96496cef358d8c2b4e6ce4d1e01eddb4718d8762cd1263ece20c12077e415c1fb282974df548d9010b6e8780a89f192c509282f463f3b3bd6be54d0e04ea18bfef70f673107c913ded553049c1973488cead3384444cee034e8b61d3cb840a4c4140e89f92e02", 0x1000}, {&(0x7f0000005480)="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", 0x1000}, {&(0x7f0000006480)="83e3961f34aa1317491f", 0xa}], 0x4, &(0x7f0000006500)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x9b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @multicast1, @local, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x97}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xb1, 0x0, 0x0, [0x4, 0x9, 0xb578, 0x72ba]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xb0}}], 0x5, 0x80) [ 741.970020][T19073] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc8dfa1518b5e31b4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4044001) ioctl$FS_IOC_FIEMAP(r0, 0xc020662a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000202000900000000001000003b00000000404f6d35970000000000"]) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000680)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040044}, 0x800) [ 742.228640][T19078] bond226: (slave bridge442): Enslaving as a backup interface with an up link 07:39:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe17, 0x10, &(0x7f0000000000)={0x0, 0x80, 0x7}, 0x10}, 0x78) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000040)={0x0, 0xff, 0x9, @dev={[], 0x3c}, 'gre0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x9, @private2, 0x7}}, 0x0, 0x0, 0x6, 0x0, "a4d457486dd52529c74593473fd723ffe0975bd3b80a696c2e5db64f69ac6b43ebb7c5a2aa76b9d323d30ad6da9190b7c7ca9ccef3f72f111083f249cd517ee20e627f84a374be92d7e53375aadc115c"}, 0xd8) [ 742.298714][T19121] tipc: Enabling of bearer rejected, failed to enable media [ 742.328943][T19110] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 742.354878][T19123] tipc: Enabling of bearer rejected, failed to enable media 07:39:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000a900) [ 742.397506][T19078] bond226: (slave bridge443): Enslaving as a backup interface with a down link 07:39:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000600)="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", 0x200, 0x8000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 07:39:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x6}) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x1000, 0xffff0001, 0xc8, 0x3, 0x4}, 0x14) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/302]}, 0x1a6) [ 742.546743][ T29] audit: type=1804 audit(1599032387.104:1202): pid=19129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/537/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 07:39:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110225013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4815) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1a0004000000", @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000013008105e00f80ecdbc0a4f210c804a01e000000302e4eeede63a30304001a000a000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 742.715102][T19138] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 742.807603][ T29] audit: type=1800 audit(1599032387.364:1203): pid=19134 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=16376 res=0 errno=0 07:39:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000aa00) 07:39:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r3, @ANYBLOB="080002000001"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) [ 742.972844][T19140] bond227: (slave bridge444): Enslaving as a backup interface with an up link [ 743.026729][T19169] device bridge_slave_0 left promiscuous mode [ 743.046647][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.079429][ T29] audit: type=1804 audit(1599032387.634:1204): pid=19187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/538/cgroup.controllers" dev="sda1" ino=15764 res=1 errno=0 [ 743.148194][T19156] bond227: (slave bridge445): Enslaving as a backup interface with a down link 07:39:47 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x2, 0x12) sendfile(r3, r5, 0x0, 0xf03b0000) socket$inet6_sctp(0xa, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 07:39:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110325013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYBLOB="00000000000000001c0012800b0001002d616373656300000c00028005000f0000a5709f710005001400000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40845}, 0x4008004) [ 743.462147][T19204] validate_nla: 1 callbacks suppressed [ 743.462156][T19204] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:48 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) [ 743.687658][T19207] bond228: (slave bridge446): Enslaving as a backup interface with an up link [ 743.727280][T19211] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110425013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ab00) [ 743.881406][T19255] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 744.002488][ T29] audit: type=1804 audit(1599032388.554:1205): pid=19281 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/539/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 744.027787][T19258] bond229: (slave bridge447): Enslaving as a backup interface with an up link [ 744.162132][ T7] tipc: TX() has been purged, node left! [ 744.174828][ T7] tipc: TX() has been purged, node left! [ 744.190611][T19258] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 744.231639][ T7] tipc: TX() has been purged, node left! [ 744.271915][ T7] tipc: TX() has been purged, node left! [ 744.296813][T19258] bond229: (slave bridge448): Enslaving as a backup interface with a down link [ 744.314030][ T7] tipc: TX() has been purged, node left! [ 744.340520][ T7] tipc: TX() has been purged, node left! 07:39:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110525013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0390b152076a82", @ANYRES16=r4, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8880) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000500001700000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x80}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={[], 0x19}}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x70}}, 0x40080) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) 07:39:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ac00) [ 744.543740][T19310] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 744.641461][T19311] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:49 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x7}, &(0x7f0000000100)=0x20) r3 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003cd263d2f99d34c42c8932f53da56db89e8e6ad942c11c4378f02bdcaf1d7a16f56f0202345e6382c84b2744242a3ece52da646fbf62924e655f88d18e2d28aa3752e26e2f765574b910c27a5280ce889037e9e900d18fbd0d5172d1a837740dbd8a9bc65a704a849576c3ad85cee6a0f42b0e162c961b5e5b4e89b6a8c7573aa86f898d5e672ec3904e1cafe2a53a317d8e832da7572a5a407381d5"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0x25}, 0x14) close(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x1c) [ 744.763369][ T29] audit: type=1804 audit(1599032389.314:1206): pid=19370 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/540/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 744.948494][T19325] bond10: (slave veth51): Enslaving as an active interface with a down link [ 745.027551][T19332] bond230: (slave bridge449): Enslaving as a backup interface with an up link 07:39:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ad00) [ 745.162533][T19311] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 745.206173][T19349] bond230: (slave bridge450): Enslaving as a backup interface with a down link 07:39:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110625013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 745.305682][ T29] audit: type=1804 audit(1599032389.864:1207): pid=19407 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/541/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 745.382471][T19310] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 745.468288][T19413] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:50 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x7}, &(0x7f0000000100)=0x20) r3 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003cd263d2f99d34c42c8932f53da56db89e8e6ad942c11c4378f02bdcaf1d7a16f56f0202345e6382c84b2744242a3ece52da646fbf62924e655f88d18e2d28aa3752e26e2f765574b910c27a5280ce889037e9e900d18fbd0d5172d1a837740dbd8a9bc65a704a849576c3ad85cee6a0f42b0e162c961b5e5b4e89b6a8c7573aa86f898d5e672ec3904e1cafe2a53a317d8e832da7572a5a407381d5"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0x25}, 0x14) close(r2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x1c) [ 745.780515][T19423] bond231: (slave bridge451): Enslaving as a backup interface with an up link 07:39:50 executing program 1: pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a000000969b1616", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r1, r5, 0x0, 0x10000fff9) [ 745.889300][T19413] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ae00) [ 745.932410][T19448] bond231: (slave bridge452): Enslaving as a backup interface with a down link 07:39:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110725013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 746.116527][ T29] audit: type=1804 audit(1599032390.674:1208): pid=19473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/521/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 746.204504][ T29] audit: type=1804 audit(1599032390.674:1209): pid=19473 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/521/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 746.253541][ T29] audit: type=1804 audit(1599032390.704:1210): pid=19474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/542/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 07:39:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x2c, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 07:39:51 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0, @ANYRESHEX, @ANYRES32=r2, @ANYRESDEC, @ANYRES32], 0x28}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001c00)={0x0}, &(0x7f0000001c40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001ac0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000001a80)=0xe8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) sendfile(r7, r6, 0x0, 0x8) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r12, @ANYRES16=r9, @ANYRESHEX, @ANYRES32=r11, @ANYRESDEC=r7, @ANYRES32], 0x28}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000043c0)={0x0}, &(0x7f0000004400)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004480)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000100)="9aaa8c61fe1dcdedb7f4baaa8155c68bfa613e5653d2ade92e60b864203fc508a650a88b1579040c1b592123349ab88589dedcabc8e5d29d0b4fcab64013608f60e4e2713a9c6bc635d2d13b2a9bf8da9f360ef5c7c1de3fef1484f0a8b291c60c272efe77d3affa5e8ee4a34eeaccd1fc3428526f94a39dd4455b8148ac91b5342c6d1729a1bbff5a73182556337c4e1e9e8b1f30cede0a089a1c8f52d78e57f2c494fe707ec99f6687263823a14e5bf87a", 0xb2}, {&(0x7f00000001c0)="87e60243037d0662933cced8e86664e3f67e60292525ae22c10e1a616e1d0d7783539f8bd5b06768c6ddb6856b25209ce2f8c7a581f205b5a9242b82370804772fc2b54e0d91e8cf5dd8a5f24a0900bcdc57e0fe7cc098f6f81054f725c69bbe6aaebf4451837fa834fa3f34e22ce805ca1e9ce6629349dc673271eab9ccfd4d35af46a0f3c40c0f9c2a2601f131f5b558af46", 0x93}, {&(0x7f0000000280)="2462ac46facc45ab6ac2317ccbc4ca801ee5e3cf675e6ec0f871f69d9772bb43398df65c5fdae6a323bd46f2269165edfcd326105f59c5254658fb215af245a089e3b6c36edf540889b6baed769cbf13cdde3a09791211d10cf0b6c0a079adde0bbd304779", 0x65}, {&(0x7f0000000300)="45b2f95592bde78c97e093405ed57297aab7f882154b413c227acb5b8837dcf684c38e4e9a2ff1879842fb45fe195aaa774823c62ade4052e9ab31fa2d008f55581cbba282b4b35dc68ca08f4b75bd349be0e3794041", 0x56}, {&(0x7f0000000380)="b16b7b37c3cf68f5f9c4921b590760c6f27fa7f70a0bea615eb68dbdc83a752931299c4ee8987cfdbe573b4b727ddd40176a191701446b1764f0a5ff737fe41589818182df4c0baf4c87d2dadf63748051595ee1a558a7aa878f1e33c07e750173ac6ecac99cc513ca1edfcbf72b20637952ff03af8272b89dc1530e80b38822968bac9a3e3670ee2c2b992ca9bcfbe19d43462353c2c54326218123486efa3e68d7", 0xa2}, {&(0x7f0000000440)="210799cdcff6afb5fe9e86bd4ef653a03c7dce1961f3b320a28bda81ad653c92fec5073f5a96565ba7c284ce0c8090b4a4f31f267f8da90d4716deccbe49639ca47adb45272dcec5fbcfa4c13988ecf2948dc5d7e65b080adaec8167dafb87c5a1cec822c7e6bc44bece8235ee39531f2a344ceb7825bb407fb6838701990966271961e4b156199379a1ddf00edf22b90db919dfb61ee1cd648292ea3c969c4e0a49e24626a6f40d0567b373622674cd", 0xb0}, {&(0x7f0000000500)="8ca468d1569ffb6a7961ad56076bf36514364e638443fd1e366deba3adf685cadee9bac62d8b74fccbacc4e9bc7c80bfed4c08f30145c098bec1b2ae8b6f2c2647dc71e2c00fe15e8de43e1269ff2c8874a2ed45eec88ce021383e73177119788f6a66686bf8372b7d1aadd03a44603a140b8884180d9e5e01910cbf02b8451d0260b5889bfb31a53b927a60e4bd2eaad913f52a682115f418d6385b756eb16b9105c8a77ba3068cd508b2966b49da40be2c7818ef9771cc15a838d1fa5c4c85c0a4dd32fd80e148", 0xc8}, {&(0x7f0000000600)="703015aef7db3a1354acc717f87eccffb263119e6285abdb3559e6624d0feb3cdfb20e66d5d58139d3942b2a0e3379870b5983a529c6c067e7bb2ca7181fee99ea4436de478c1ebfc2d9b766eeea2159b761f1cd511ca2f4179dfa6d2f47d3bbd43c29f3432119352d430acb8c67e5c3c52d2893e4b0", 0x76}], 0x8, 0x0, 0x0, 0x240410d4}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000000)="5d53adfcfefc67190938a13035eaae2b4bf573a771499c8c5f4497dcce", 0x1d}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="a51157f45b2d9e7923fd7191afbff03d0d9c5fb8422e17dad53e1740caadaec31851fd660877d804eb4adb454e602fa79bf4df9d7563b034f3705e2cc6edd38fae8aef75ffd973addd83cde8f45e4abff519aee759a79e6dbb5396b3c3ba40f5ad6cc28eb1cffb33c485aca968e3d778aec48d050bb045ca0b4bfd97f91de368482d8f", 0x83}, {&(0x7f0000001840)="112da8d863791ccabf9e3db3be2755ccd5b98e7e8f86d72593ef5b83451253128371b230fab314beb03963b7864fe93334e0edac4490095744ca06e7cd330d179eb3bc4637807335327d43e4705be2998dacf3e52ea79af4e45b9016a040511f6cdaebd236973b58bc", 0x69}, {&(0x7f00000018c0)="4fc53dcc2dae3a7a6b9655ef8fe2b039048435e84c551a21851dac820f4dd56221ccb5d6dfb3e37911", 0x29}, {&(0x7f0000001900)="d13fbb7fb7b4ea0992f1a751257d263d919faacbaae551c97908b10638186432922a3a54b740b8b09e11c9a2463d08b3208b3a6030db0b712e9250d41a2aed6a71dc9dd1decf8027673f8b22a58a0169095eec3e7219b71ae00dc2ab1efd0680931eb8e52c0e144ced3d08eee37e2eba2075b4a7f138a18f777fc93e1077b785b66c18223e9432184a5fe15909c2e92ecd1deeb682bf01eea4f3a8be4086e2b15fb46bdd1715559487b239c44091850e56ee80dd907fbf15fd8afa53bcdfd9b8be849c5dd08d2c1b8d4f93b41b23d415906f", 0xd2}], 0x6, &(0x7f0000004540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r12}}}], 0x108, 0x4000080}, {&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000001f40)="7231477facc34966bad470d39231df4c294b4ab1104e", 0x16}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)="c11ad05cd1fa223068cb11bf24ee49765b46", 0x12}, {&(0x7f0000002000)="3838aca5dbc0585d7907cb0baacc15ceaa3a97b34a31c449090cb552f535dcf9db2bda38cee62206ab033f4fecaffd54307e027d882fd5da716f1ab93466da36b2f9f8b67704376bcedc628f03891bfc6e50d2d698444b45925cb32744ce2d41d59d7e8a71e4e5e88b8ba5ed3f494d1a05e925611de6325d1fe4a5ec3e8f87", 0x7f}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="6d83054ba9f70ff2e651e939bc2f00fb256dd67cfa67df1ce02686f8f1624f3d30a3310fb2c457a40709ea63fdb5913c0d090a8afcda51b35f5a39c0ac59eaba6481377c8554d329b2eede76555e31ce32a6d2c85f1a6cbd98740b54b3bbca1e3384334b75f57fe09fc32ee7a249f524932dd43f804587621e0db7305a50a9b1d0", 0x81}, {&(0x7f0000003140)="c93ebf04aa72759ba2e6d6e76b6445489060f6ad91c14cbbc89eddedcc5dd13359ad0f1dce5ffb36baee17a86571635852f7e8ca2f7d78e850bbd2031e0684a08187f5e7daeb74f4887e31977d363a12486918bd83e16376551c6253c238b761863e560096bd7ee1f0db1812046db86c4abe716285bc8a45fe4fc9eb7a7260864c9bb44a5c1c739cd66a984dfd8c02bc412ec26504a549590e276ec9a6ebb8325145de75442758e3b12e189a2c3f632669308a2de323c49a3845b0e623486276c531779ee993", 0xc6}, {&(0x7f0000003240)="ae1ef31d15c2d5a9bc34421e13dc9b7803befe2662b554daa301a814f98cdb913ad8c88fbd7faae9c8cf2c1c843217fe51472a7e66dfbedd1d11988cd578e5a74436842183af60e0c32871c8cbdfc0a1294e88d0fba9180084e9673bdd179cfe02fdd04782dd03afba6e5071bb1e75e056c97d30ee26ddf8063a0bf8e6200b5c970ac415b35e8fef13772a9b47940743057489a33fa26bc97a6e3fc877bb1cc85841dc6ce5ec67a74d16f094b90b44cc4965fe2065762f83681748dc35daee49202682a084e712979169d7f38d9fe83a21727167f9db1785e72dd58835688caefccc1cf8ebbe09a00085d9b045f6c39685591c2491d033c371240bb226ba1562a82eca53fe958e936eb6f821346a0867352f8b7723606cccb9af1b93084c98ca78fee46cfddeb0bcbac0e1cf9bf17e3ee078086cc1cc316f406cd73506e730cd8f8d543489f0dc992fd171f3c695253f92fe9a06580035b4b3ecda60a742351ed2f8812ea3c409326c4281db4732cb57c92130547ace53f82f9a0e149fa3c1bfd67a5dab052da7237f685918af167b5c0549da40057a28cdaf18219c11e237ed1aece0eee98833cbbf28ff00143284baa6460d393d184514b76ae44f8fefc632e4f2cb7083bdc9276c3347c6551e2ba91c2345892424699a8d7943c2688227676cb9f0a7a10c23809ea5b1b7ecabbda9104f8f55b04c4547f7001c962f26e79faf975e89ddfe1af134d4aac73c6cb9652c93a93db384e22948b8131594d04072ff832c1779dfa29b8f1fb4c0dd615bbf3942a5cf252f30f59a2f0409277fa3ac567aa448cfe83562f96d4ffafaa120767d76b19d97ffb60d10cdbb046df3d5d35d851bafc92daaf2e9f50aee3d42ba39ddd11ee4e3f89ead3415577a6823c3062f92b1eed424b71bc85cb79247b7a1130601f9c38ac30ac53518f52e9195bdbf928a6a5ef0665aebf621e1ec7cd183613ca2bddc980189b7b52664dd18b03187b7778e901640c8ff8308dba06e05d01cfc6122b99760b6cf62772b2de7607ac2b3e039f8e8b4147c11b7148a576fc62ddcf65c30490cd59defde6d2872087416eaedbb754117f4925ee795d5a273f23005aeb7c3000d8283087db0e0a22ab6d98baf332e25c61b749220aca1b47d0b61e571ea26f2906589c964a8e9296910578c553a908e2ed0307b73e04affeb162906729f361802aba787052076b51004c8a548c9af33259324c408eeef6f765a0a03e9fd3e1036fa64a10489133bd60d3338c13e1cc393b4586d16e5f36ce661a47e37fe73ba0594f8889f92bd79788431a05b3582b4665d3a96a60bbbc3b6d450be2c91c35e251a0ed7d181882fb2f05659bed160a0a134f6fa3702ab10e408fba8e8cc085e6a39f89a911c7b442fc5a796590c27e73e843638bb90db4362bd800b8d213f721082c3943353256d8e5de01abce446b97cd895c6eedf825bf7c21b5df826f98e872cabfc433625c568a6d622d01e3a81c934eeb6504405fecdd4d2fdd03958528e61a9edd5e21423dce4771ad6188c331511042f7a1b9494e71321a71cabeaddd376c731970a1070e68ac6c064fc7c3533f4e07b32cd5ce26e75305b4e867d33154edbddd71e82c0afe95a8e3000761eb2d18a8455c5667597954675dd91634cf3894e88721f0d721092b81e2380ce5bef688e66d8998c5f99ee02a752f9cd826a746e0752ab78ae998a31d6d9dc5af109170404e2bfbfcbeaebce2878a2b4583f4e690b51b26acfd3ea378d59d6a02d1685025451246432e542cca8901d97ebf203b94e2de9217001214f0a76ec11a6cdfb78e47620d0f7f1ef9983d7997c4842348dbb2accf7338d7e7a92eb883d3a5687afb4d8e4a42a9684a338458ab69b37999666e27d2b66799088b337c9210d670b736001603a84e90ac16d7706629908b300e29da38e9c09fdfd0e6392ec02d165d4aec66dac8463178f747828fd8ab7b6fd5e2c127087994801e08f7cab444f89e0fb8979d200cb11cfcb7857f307843c9aef2c3fefd085ee229bb06e1f911c2404c269bc1ff88939982abe5998d10797f093864e4f9d6362944b71012df2158e3977f6411bee09a48d1bd318ed90ec6eb9098df5fb95d81d238f669465480c98bc7ff1441e503178686f8ccd91a6c20f0ea1e60f9edcb717e327de12d1fe492c9a5f59e8add84451df7c9b3a4b36c0dbd34966fe4f82e84748585438391e7c382ec5bdd6dcdb3b8826635ef4e7a7744f2141d15428d4f03d1bfc456d71f41f6dd152f7bdc08d23f99b16d4773c318f2ba0a6b427cdc9e1ca247d52bebfdf719e7aefc11ffe855f245af5355c20732e7d6218e5eb32142a3a3a6092b2a9c6bea66c4da232113e5b6b46d219e8cf39a6f877b6de9e9dafe4432ca5e4058a0918886c140bc1d4d6e3a6963f479a4bf308e4559ccc792c05824ffafd273b8fccc5e8122260e331be1393bee2d1ef344341f16c11957902cbd86332be1b4937a06177f20fcff36b922b1e920121c9e059d25b202e9efeb72fe3e9968bef5a28810f5076e63b736e38cbb9bf3521ab943b72b733ec0bd29746627627b958f62c544ec5dfb50925c9396eb670c1fa0990786de544807728a5b0c67216803afe22fe2d76a3736635870e16bce6ab1add5964f8d8bcff3b192dc2af73041202e51d092c081016c6841fbeb97b4efb16cf060213ff59a4bcb9528c04dab6467e729676fade313afc8916c998cd727feb484de160550c4ecace988acee41e7d9b3af5374519587916192287b9a5b1a4ab469e93bd196a09b7995dddd3e1b5f9d1339d1d58dd931c0978fd8f1d12c3722525c54682c2463f35d06aca0614734d5f7c3484cc22ecf58a6879cddca72fab150f50bbdcfc661e4ebec3f0814dba4270415bfd7dd61e89eabdf640697b1455e5882c3018ffe3fd358b10d19a5f0531374e9eaacaac2e292e26c1a0eaef91fbd2458718c208ce6dab05baa1579146d6555f529d10296435c49678d7282ee2a34dcba5e40d3c178a8304123e25fae4c4beebdba390933815e8e9f172148fefa04c4d1cdee4005176141607070602d3a33450ed833a42c4177b98958e152b3d153a661a0ac61c20028e245d0606b4cab8ed5c3d6d4e32a7030c8b5bbc846afaf3f5d76b8562e5bf0da0e4e20351de2303626b25103137092b28b61fbd012ed6ea55f1a7cb9abaf578073c8d27c957725625cfec83edee0fe971460ec6354de68d362fb6da7c44d8cb9427175e10094c13b09f186943481071e02294a697178d01ddbc3463e1d372eb0216c3799063793b907454f1182b2144e0664924655842d6216c91df9b37bdc3a330f199041cadad440ae6e88fb5179d601697e5c0e99367a035b824f9315703347cc55bc0bfbad1fe764cb434842253fef23cddf8e52f056f53274e5ac38044e8802f53e83c49489779a26aa3c4b55b9cde5075bd76c3ceadc4c95b687ec23c3f21495b012cab77135c6448816a908638153374c3ed60e49547c136460b31e31c3a4e0b30897cfcd812e0988d72fc8691c0a39b7fa0d93ad2686d390f8bdcc5e57b432497b874555dec68a2a9ccf5f1021e0526f53cd75d9f73b04cd9f93ddab70ad1ddaa54ca82c72b66fbf3d4bdefe5b6aed104c1adf8594e33d583ae52c80b3dff68874c115e357ad98c4074ef7c6400a6e08b54d69f6155bbd6b45f6a57154b305038d9a5a15355f05e01882d472b1cfece4033c7c3bc95c5c2e4f5d4655b240719337b2c03a8fb3236fb18ba41c02bbc2ed7d4149f5a2aa664b3178157de0ec3d63cfd1666530efdf2fa89edaf6ba9201a437a371b8e1e916572723161605680a707034d182eff62d984cdb486d2b8f8718ae3cff942b940728498f4138a4a54586ea7b11ed070ea51ca7f211acc0eac629b1f29c94af5f0c598dfe9109d99c7aa9d52430d8bc0eba87bd4a2575e7a09584fd4cdafbb77f72ebec9cf841660250cdabff4c4badce0ff7e81fd4a6613c65647a548bf5933b1c9e1b3e15ed4c7ba00af27c50f647f5e640d8cda7a7f2afb01965e366650dc46744736ecf7b8f1277037feaafb6e4dd9a8c5c448db9e2411669d1f66dcd109306ca2da54c16f437a0fd78c477863d5ff090bf567b488f0cb9e31c17c0abfdc5f14096e03bd5883a44d925110a414ae1cbf8fd55c61be2732292f7fd437d3e5ed9829b74c90e05c422536f1287b257407211a8a0f9278f73c41919b6bed4ee6245c0bdcd0e8039713b93144b4cd708e6d75f6a7ecf205c7284c3d9eac2171f7be44154ac3099afc61959ee468c042ec5f948a4e3a85efed0f85206120f0d2541c54263d10e278a7d60a84fb4ce10b1fc078984e4f079949d4e8f93aa48a0b7b13270ab0641a84b41ff6dfc4a220d23acb3e3bdd3a731e786339a089629878d1b86eefe952bff6c24e92ba0bb49353b87fef403d28ef15bd171dad0e5c496e1e99b2a2039e00e66f01bcbb68a12e07370523415fca39771e147ed18485a1c796ab82b75dbd72f2885853eb421fb1849969a088f9ea68bdff6430a168f071facf85d01efa2c71acee776b03d520278dc344ef2156ff78addf2b8259feb4e411eb37ec17eeef6bb6801170bcbd9e13e9811d1f74c61e9113bfc6eb8d45e40ff717f3208d77ffca01c99e654a5405002f6feab9cd03f92fb2bb16a410d500f6ded451d206bcb09adc709517896e7a4ef0352ea122dbc4e29a711860ed53f48e9a4c9245118d62da51eea2438faa5974fbf6cddda62bca31283016ba16088eec15c300641d24eed80de522018ce497ed59647933439240b03a001a9d6788ba700b4ae73db90fc13f4f3bc9f2dda2d317264e1d18349f4d0513adc649620328fb61b900e7d723bd9f01311ec3a69794e92025fab80f92d83c9ced8aefb222a9708eca0db1d675f0a25ae5709b2f4b645fbed3784b9466d6ca96be55158b69b1f231bd2fe6c975176fbc27ee020fa07717ba10f543e17ea3775c821f423138c75ef04896278d78847615b80d593c9eeaf8be14d682f5e9d9bdf234f3cde41e8cd8e61d0813701a94da8bf4e04d953851266ae5f66c5c154e289219b126b2f45cc8351491397df3c4c77aae2a49a4a221641d08c288ecfd8067a27a3ae0e23cccca6cb93be2286a35642d89c6b59e7ec9d1d975578ab258a9dec61c6b4362add56a4175b9a0715475b957100a9f99b36ac690cbc3808c09175b882423c22d812cdf933a7628c898bad1b933a4a50d0424fa352df73cc41296dc17646bbf4d082f0dbbd994eaa16252ceffeb7f44fa66b5fc280dba4eeefe64066072031da98b95d27d58861a4e3367bc3a977b117d2d98b92936e1704694af8f8dd0a5c08794413ead6593ada09ff09500b4d50a8551ea4cf85ae91e2077e1427679e9aec22c10e4c843e4f47d225b86ac6aa0f6a20545199c2a0c296a709341b9b777394c4a1d6312a2d10d5b4c8105a9a4896de45108454a533406ff9b84d887419ab78f89b1197c10284f00ebc7823140df8535e83cfc39567309e52299e71f432ed68b9f75a8a62b485d4663f2864e5b33f4b1ddfcc59f6f16db7c3637102a7070f8f38d4105122210d40eefe469492b68b36d86f627d560171c5492c9e202d0edbaae9cf13abd35911561b3eaa4c23966f7a4e4f68871340dd87ce2128cce1989e7cdb4d6c147104b745eaf3eb4412964e0bf7ca3bc219b70baba9c387b6900e0dd15a528f9722a1db9930333b0c0ac944c571c7d6264a81ea33f79dc8d838aa3872c2ec17917050bbf94101a3b28e61518fa268c", 0x1000}, {&(0x7f0000004240)}, {&(0x7f0000004280)="53ecf144027f2b6054f776d6cb10d69f81e04f69a8ba87dac361d77407e5b38cfec4dd87c8e6bba5abaff98ee07ac17f84129a90949ad65679816f2d52931e38d9a9bab6240ec3a3c1c122194269e42379fc25dc0090c40eddc5e0", 0x5b}], 0xa, &(0x7f0000004440)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee00, 0xee00}}}], 0x20, 0x40881}], 0x3, 0x20004095) syz_emit_ethernet(0x3e, &(0x7f0000001c80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800470000300000000000069078ac1402bbac1414aa070804ffffffff0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0f435a90ff9ab0f45c0053e1ef7d490aaa5e2feb63169fd13425c34adb93768e04b7a42cd3ae4221f677f5c5f296e419273a03d4947b2352f755116e6189275c00c9e2b2a13b38c7fbc2aeb25e887b476add94cc90bd39895f7c1e867ec5fc38b1ae3e53ed26029fd74ac52655fc81012be16b0f268e7bdb133e9ce3a97d2d28b6b0ba27b23526b90ec1537632355a2c4309ca947989818870ea57f65645f9a0f1e9f8a1f809b09462144889279feab089d18bc8e96b71eb9364"], 0x0) [ 746.411220][T19480] bond232: (slave bridge453): Enslaving as a backup interface with an up link 07:39:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110825013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110725013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000af00) [ 746.959625][T19542] bond233: (slave bridge454): Enslaving as a backup interface with an up link [ 747.059341][ T29] audit: type=1804 audit(1599032391.614:1211): pid=19571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/543/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 747.118264][T19569] bond16: (slave bridge36): Enslaving as a backup interface with an up link [ 747.174473][T19560] bond233: (slave bridge455): Enslaving as a backup interface with a down link 07:39:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110925013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x1b, 0x119, 0x70bd26, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xfff, 0x35}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000010}, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200), 0x4) r2 = accept$unix(r1, &(0x7f0000000280), &(0x7f0000000040)=0x6e) ioctl$FITHAW(r2, 0xc0045878) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) 07:39:52 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x2c, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 07:39:52 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000e4c5d08b9802c062fb001108006f081898a14c5e7db88757ec4de1d74417bed0173e4826bf81d29413c8b837ccaa85e46a836d6d570d62268164dd22393a54ccf1fa7e6785c9f732039ff5c862a7ba261fba8078a93f0fc7369563e0d4d9d96e5a6cf3feeadcbadfa1bc450704", @ANYRES32=0x0, @ANYRESHEX=r0], 0x20}}, 0x4001) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={@private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x3d}, 0x0, 0x9, 0xfa0, 0x300, 0x3, 0x4100000}) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100800) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="c3ae737ce3375fb4c0a9895a20d0b46a2340c22b74bd5cf0a8a5b2de54a48845f7510bd226e2400bf225411611a232c2b42bc7d184243e4772e40feed1583ed8c5c333ed7de083c0bda4767753a2b171e690e5f1e149741d53f83703ce0639db9898a7f0f1323b6522ee28b154cf67ec1d7f91e7d6a6f1c2d198b36f159ac1fc13a7eafc0f4540bf41871a2fdb3c1142de6eecf9cadc4876496c3b9e101bcb4a0f8e9c2e2eb71d611892107b93cd30052a593fb1612898d77f0a952b02a2d63f1c071c3e2c352ed1666ad73b7ee1328e31017cab3927a81bb95516df8069c40da619bfaa5273e76ee693fa6bd9564773", @ANYBLOB="110701000000020000000900000028f880b8455fab1550e9b6b1106df5ad680adcb565f908a0b1c2df9978aaa5148d802b36945bb4926b972f444f20efe8f3c7f0be513fa131b13826246b347ce54ead98e1981b86d7b10c"], 0x14}}, 0x0) [ 747.590640][T19629] bond234: (slave bridge456): Enslaving as a backup interface with an up link 07:39:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000100001040200"/20, @ANYRES32=r3, @ANYBLOB="000000000000004bcd20e7dd86d72c000d00050000000500080001000020050009000100000005000c0000000005080001000200000005000d00020000000000000000000000000000000000d2af5f55423ed166c4b75ff30d355d8bfe493debc299af8c0140c82ad8141ea0764e0d073a95729110c6c85c7ea91dc90639dabd8da189bfd2d3873c8f66dffc91d12995b7e7acc8b7648bf59b2d82e87d3b288bb246867370cf02636cff5abf72de7cf66ebcfc731e7d08dd4d8f108d4016e7989b3121af378b6e08085d78986edccf5429f42f32b4c3d167046be59c7eb80fda7e846a2e845f"], 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:39:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b000) [ 747.737814][T19620] bond234: (slave bridge457): Enslaving as a backup interface with a down link [ 747.740831][T19669] IPVS: ftp: loaded support on port[0] = 21 [ 747.867416][T19669] virt_wifi0 speed is unknown, defaulting to 1000 07:39:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110a25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 747.938405][ T29] audit: type=1804 audit(1599032392.495:1212): pid=19681 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/544/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 [ 747.991897][T19680] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 748.052153][T19680] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x129442, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000002140)={@void, @val={0x0, 0x0, 0x3}, @ipv4=@tcp={{0x7, 0x4, 0x3, 0x3, 0x132, 0x68, 0x0, 0x7f, 0x6, 0x0, @multicast2, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x4f, [@private=0xa010102]}]}}, {{0x4e22, 0x4e21, r2, 0x41424344, 0x1, 0x0, 0xa, 0x4, 0x9, 0x0, 0xffff, {[@exp_fastopen={0xfe, 0x12, 0xf989, "dfde95000c90ea8689f41fd686d5"}]}}, {"8599ed8717428f665e3a9e56f4cddf9a7c7124d6e4c5388fc63925bb641a0eee8269e2ca985d8a14ffd1ece242ece18a47382206e2c941114821eff0584944ff0e75e5416d19ede1cef76970f6d7da90c82fec2f2c9147018c6c3e09eabf3ea1c8cc2ba4d1ecd70c21937bdccb433b9f81cf38e4432a21aaa64a403b2eff2b0f2b76e697039cfb29a76cea4db843ef9612a76419057955f754e8d8966dc0bd6d515cee780fd98ba17225912fc11808f343634aa6584b3aec02e9bb661e4aeb3507bace4db343b02f4212f280de005ec541611b21e997817353035d901a4d4fd269fc0d0022ebfe40ab2efbbf51a5"}}}}, 0x13c) 07:39:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b100) [ 748.272127][T19695] bond235: (slave bridge458): Enslaving as a backup interface with an up link [ 748.431517][T19695] bond235: (slave bridge459): Enslaving as a backup interface with a down link 07:39:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110c25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 748.581681][ T29] audit: type=1804 audit(1599032393.135:1213): pid=19753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/545/cgroup.controllers" dev="sda1" ino=16377 res=1 errno=0 07:39:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x2c, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 07:39:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b200) [ 748.950222][T19757] IPVS: ftp: loaded support on port[0] = 21 [ 749.186496][ T29] audit: type=1804 audit(1599032393.745:1214): pid=19772 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/546/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 749.420511][T19759] validate_nla: 9 callbacks suppressed [ 749.420521][T19759] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b300) [ 749.668598][T19762] bond236: (slave bridge460): Enslaving as a backup interface with an up link [ 749.778370][T19813] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x2c, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 749.850267][T19766] bond236: (slave bridge461): Enslaving as a backup interface with a down link [ 749.926310][ T29] audit: type=1804 audit(1599032394.485:1215): pid=19827 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/547/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 07:39:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110e25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 750.179229][T19842] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 750.399721][T19843] bond237: (slave bridge462): Enslaving as a backup interface with an up link [ 750.448448][T19843] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 750.507858][T19843] bond237: (slave bridge463): Enslaving as a backup interface with a down link 07:39:57 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x10e, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 07:39:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110a25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b400) 07:39:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000111025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:57 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x80000, 0x6) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040cc}, 0x884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xd}, {0xb6ea6f9b087d72b3, 0x6}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 752.817220][ T7] tipc: TX() has been purged, node left! [ 752.824405][T19897] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:39:57 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1405, 0xe09, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 752.974457][ T29] audit: type=1804 audit(1599032397.525:1216): pid=19943 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/548/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 753.019999][T19902] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 753.163748][T19905] bond238: (slave bridge464): Enslaving as a backup interface with an up link [ 753.183683][T19929] bond17: (slave bridge37): Enslaving as a backup interface with an up link [ 753.243064][T19897] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 753.243163][T19982] virt_wifi0 speed is unknown, defaulting to 1000 [ 753.306843][T19932] bond238: (slave bridge465): Enslaving as a backup interface with a down link 07:39:58 executing program 0: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e21, @empty}}) r1 = accept4(r0, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80, 0x80000) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1000, 0x4) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x398, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18f8683c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4ef6ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71bad419}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x485fc367}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23cf6215}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x630bfdaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2571cfbc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55084ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2968b804}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1b4, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3ff7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6630ea2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xacfb0f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49dfd675}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x178f0816}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x768700d6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe88c264}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74792dc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x130d8f98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x146670b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x625a08be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x562645ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x82a47a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a6d82f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae76510}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb983654}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a7bac0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fefd71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1af1d75d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42f35823}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d140d4a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x127b50aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25dff133}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3361713}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2046b3b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ec5e015}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a9e43d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c2ff2ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b68b5b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5956d60f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a94a23}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e25a8e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ed46e8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x438f17a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52ff8062}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x86423e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8aa3f2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x547080f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f93de7b}]}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x1}, 0x2008c000) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000680)=0xfffff801, &(0x7f00000006c0)=0x4) r3 = accept(r0, &(0x7f00000007c0)=@ipx, &(0x7f0000000840)=0x80) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1c0, 0x0, 0x400, 0x3, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1f}, {0xc, 0x90, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x8f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8c}, {0xc, 0x90, 0x1f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0xd7}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4884}, 0x40000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000b00)={'netdevsim0\x00', {0x2, 0x4e23, @loopback}}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000b40)={{0x4, @private=0xa010102, 0x4e24, 0x2, 'wrr\x00', 0x2, 0x1f, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2001, 0x9, 0xfffffffe, 0x400}}, 0x44) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000bc0)=""/71, &(0x7f0000000c40)=0x47) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000c80)={0x8, 0xe1, 0x2, 0x4, 0x0, [0x1f, 0x5, 0xfffff001, 0xbdb2]}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000cc0)={0x0, 0x1aaf2805}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000d40)={r5}, &(0x7f0000000d80)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000e40), 0x8) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000e80)=0xd490) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x8804) 07:39:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000114825013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:58 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c10001ff7e3ff258f1c872d2b0100cf26", @ANYRES16, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x800) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 07:39:58 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x80000, 0x6) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040cc}, 0x884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xd}, {0xb6ea6f9b087d72b3, 0x6}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 753.621756][T20009] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 753.629683][T20008] IPVS: ftp: loaded support on port[0] = 21 [ 753.637954][ T29] audit: type=1804 audit(1599032398.195:1217): pid=19920 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/548/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 753.703040][T20019] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20004 07:39:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b500) [ 753.822835][T20016] bond239: (slave bridge466): Enslaving as a backup interface with an up link [ 753.921431][T20008] virt_wifi0 speed is unknown, defaulting to 1000 [ 753.921596][T20016] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 753.984941][T20010] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20004 [ 753.994050][ T29] audit: type=1804 audit(1599032398.545:1218): pid=20067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/549/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 754.038718][T20028] bond239: (slave bridge467): Enslaving as a backup interface with a down link 07:39:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @dev}}, 0x0, 0x9, 0x8}, 0xd8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_macvtap\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x90) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000040), 0x3e6, 0x4000800, 0x0, 0xfffffffffffffd34) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x2020) 07:39:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac43d000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x20}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x0) 07:39:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000114c25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:39:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b600) [ 754.533065][ T29] audit: type=1804 audit(1599032399.085:1219): pid=20112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/550/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 754.639827][T20008] IPVS: ftp: loaded support on port[0] = 21 [ 754.771077][T20102] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 07:39:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b700) [ 754.897278][T20103] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 755.007579][T20106] bond11: (slave bridge12): making interface the new active one [ 755.088474][T20106] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 755.130761][ T29] audit: type=1804 audit(1599032399.685:1220): pid=20189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/551/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 755.177155][T20108] bond240: (slave bridge468): Enslaving as a backup interface with an up link [ 755.207526][T20110] bond11 (unregistering): (slave bridge12): Releasing active interface [ 755.491838][T20110] bond11 (unregistering): Released all slaves [ 755.574660][T20111] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 755.582831][T20106] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 07:40:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000a060101ecff0000000000000000000008000940000000002d8d945a87dd2f35b38e05000100070000000900020073797a300000000014000880100007800c00018008000240"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="049951d4b9f3"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 755.641025][T20108] bond240: (slave bridge469): Enslaving as a backup interface with a down link 07:40:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000116025013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac43d000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x20}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x0) 07:40:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b800) [ 755.801977][T20241] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.874008][T20241] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.899552][T20248] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 756.024313][T20251] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 756.060598][ T29] audit: type=1804 audit(1599032400.615:1221): pid=20276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/552/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 756.199224][T20253] bond241: (slave bridge470): Enslaving as a backup interface with an up link [ 756.288806][T20275] bond11: (slave bridge13): making interface the new active one [ 756.321914][T20275] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 756.388011][T20291] bond11 (unregistering): (slave bridge13): Releasing active interface [ 756.638157][T20291] bond11 (unregistering): Released all slaves [ 756.718122][T20253] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 756.770191][T20281] bond241: (slave bridge471): Enslaving as a backup interface with a down link 07:40:02 executing program 3: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xff}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 07:40:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b900) 07:40:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = accept(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x3f, 0x5, 0x5, 0xd5}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x3}, 0x8) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000340), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x2, 0xf011, 0x7f]}, 0xa) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="00000000000000001c001280090051725a1c57ea6e640080ff0f0000028008ef00"/43], 0x3c}}, 0x0) 07:40:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000b800) 07:40:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000116825013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 758.363369][ T244] tipc: TX() has been purged, node left! [ 758.462850][T20383] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0xb3, 0x3, 0x8}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000100)={0x0, 0x3ffffffc, 0x2be2000a}) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x2f}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x2, 0xff20, 0x8, 0x80, 0x0, 0x8, 0x6, 0x0, 0x0}, &(0x7f0000000340)=0x20) sendmmsg$inet_sctp(r0, &(0x7f0000001800)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0xffffffff, @ipv4={[], [], @loopback}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="b6782727518664ee3799e1e3624228b414e25b4ceee2", 0x16}, {&(0x7f00000001c0)="65f0217dc3f1ddc53f", 0x9}], 0x2, &(0x7f0000000380)=[@init={0x18, 0x84, 0x0, {0x3, 0x7, 0x7, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5d7c, 0x204, 0x5a1, 0x10001, 0xdc, 0xffff, 0x3, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x20, 0x209, 0x10001, 0x8, 0x7, 0x2, 0x101, r5}}], 0x78, 0x40400d0}, {&(0x7f0000000400)=@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x3e}, 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="24fb3a5a8fad4ac3f863694985c2db735e130ef5c8bd8a665ce534982dc880b784e31dedd9b23540931e29ca24945c64df2d04250a74b7181f9b5744483a40", 0x3f}, {&(0x7f0000000480)="a812c7af3b2ba102a8630e3dd18dcef7944ad1fa9a9e85b3cbbf3e442402f2c869d87e708336491476bd7c983d4f4ed301e3eef2f54015d5b3d98a7274b1951f7f8bbe668148f2e1eb52649b5afe6cd1abd7c9aa54440c83a7f1d79d03356cab8bfdf3c3e6672907f2495f9c88f898b04fbdd92ecb49906cffd108f1fa984ce67600c3406e04508b4743287f7888d628", 0x90}, {&(0x7f0000000540)="5bf25affb9d25ba638038b6bf0356186", 0x10}, {&(0x7f0000000580)="c633ec885ed9434e399b44b6948631894a8357c2c959de5c388cef393f49b8504e824a346b1b14a05bab18f046678cfe87b8eed803534a432d99337315397d0cd445a8da08a4aa7cabe1f9d46600d987c7f70d61630577bea707e1190765c0a5fba1c460aa385cbdd3cd6d6e517f5d8b08c66020ca106a45a8360a2d019b77b4ff190abe68d570896e004159df96", 0x8e}, {&(0x7f0000000640)="1138732e97a2828ae93634566d82f69158a51438dc184219bf505f3322dbe8218df2bff15f8310cdfbbaf426a98ad03b4e440c4dab6dfb72001b34a6f8ea46d857dd856f8ad072a335ad470d51de01d1be3296f9f46b93ee48f2cf77bac0810c4b067237f745e6de86dec68027185e2bd79f7da629edb29902259143595cfa3a646cae42a8b409cdc8505600343cf297ad7e847222ad16c512f5d71440f7a799c0146e44e4ce1603", 0xa8}], 0x5, 0x0, 0x0, 0x4080}, {&(0x7f0000000780)=@in6={0xa, 0x4e21, 0x1, @mcast1, 0x1}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x801}], 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000018c0)={0x0, 0x80, [0xfffffffffffffff9, 0x0, 0x7, 0x3, 0x8343, 0x8]}) sendfile(r1, r2, 0x0, 0xf03b0000) [ 758.520615][ T29] audit: type=1804 audit(1599032403.075:1222): pid=20381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/553/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 [ 758.625744][ T29] audit: type=1804 audit(1599032403.175:1223): pid=20385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/530/cgroup.controllers" dev="sda1" ino=16308 res=1 errno=0 [ 758.680131][T20388] bond242: (slave bridge472): Enslaving as a backup interface with an up link [ 758.742093][T20394] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 758.786358][T20388] bond242: (slave bridge473): Enslaving as a backup interface with a down link 07:40:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ba00) 07:40:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000116c25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 759.052872][T20444] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r3, 0x7c, "2d6be9c7e7d2213a5611d8718aa3741b9d4181b00969ebb6853e7ab720c5106813ae6e44c5f8a73025ed6d7ac026fc5b7f16d5664292b7f487c4ffd405aab14ba913a92917a87745c128903486fcc5879d0807e484d056d46ba9d05c82590b4da8c488683d747c25798376d3d3a5b2c828dfa13460ae9383d9449555"}, &(0x7f0000000140)=0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_cmd={0x26, 0x80}}) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r4, 0x25}, 0x14) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000080)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x1b}) 07:40:03 executing program 1: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004800002000000000fe849078ac1414fcac1414bb83945f890315940401000100"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000081) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000180)=0x6, 0x4) [ 759.188933][ T29] audit: type=1804 audit(1599032403.745:1224): pid=20461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/554/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 07:40:03 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x800}}}, 0x0) [ 759.286211][T20447] bond243: (slave bridge474): Enslaving as a backup interface with an up link 07:40:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000bb00) 07:40:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) unshare(0x40000000) socket(0x10, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000), 0x4) [ 759.397601][T20444] bond243: (slave bridge475): Enslaving as a backup interface with a down link 07:40:04 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xfff, 0xfffffffffffffff8, 0x4}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x800}, &(0x7f0000000100)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 07:40:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000116e25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 759.610137][ T29] audit: type=1804 audit(1599032404.165:1225): pid=20504 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/555/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 [ 759.900348][T20532] bond244: (slave bridge476): Enslaving as a backup interface with an up link 07:40:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000bc00) [ 759.978471][T20511] validate_nla: 2 callbacks suppressed [ 759.978479][T20511] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:04 executing program 3: socketpair(0x27, 0x80000, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@isdn={0x22, 0x80, 0xff, 0x7f, 0x6}, {&(0x7f0000000040)=""/248, 0xf8}, &(0x7f0000000140), 0x8}, 0xa0) socketpair(0x3, 0x800, 0x10000, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5412ab50}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044}, 0x4004080) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002a80)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002ac0)={'hsr0\x00', r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000002b00)={r1}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b80)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000002cc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x88, r8, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd52}]}, 0x88}}, 0x80) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002d00)=""/152, &(0x7f0000002dc0)=0x98) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000002e00)=0x64000000, 0x4) sendmsg$AUDIT_GET(r3, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000002f40)={0x9, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000003000)={@local, @dev={0xac, 0x14, 0x14, 0x39}}, 0x8) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000003040)=0x2, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000003140)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x28, 0x3f7, 0x2, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48008084}, 0x20048000) getsockname(r3, &(0x7f0000003180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000003200)=0x80) sendmmsg(r9, &(0x7f00000077c0)=[{{&(0x7f0000003240)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80, &(0x7f0000003380)=[{&(0x7f00000032c0)="6d532c9667850145440466ef77a04fc168d67004d78d321c59dc81ebccffe601583259be671d5e2b2a62c9c3d2044fa435da32b40b7fbebf8847c9ba16e97a1b22dcbdcf082ed12d13acac914725337a326696f1156e7df6e7262d886fb2fd26b07134ce1db4596c1800987b8adf5f3e4e0295433ff0327905e730e28feb4b5f46bce94d72d3caa429b29d424e1db5df17bfbf0caba59906eba2", 0x9a}], 0x1, &(0x7f00000033c0)=[{0x1010, 0x1, 0x3696, "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"}], 0x1010}}, {{&(0x7f0000004400)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004480)="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", 0xfc}, {&(0x7f0000004580)="96ea44a1d5", 0x5}, {&(0x7f00000045c0)="eaf0ab275cb58e2064467afa8196cbdf298c1218c9711a6c4d12b4466e4c5d7d748be1395ae9ecc4aa45e5dcf32c874ee02450d33d85a777a1c3a4dbc740f401ae174cf8a8a0398725f0e576c0040866757ec315de6fe3c93153e10dd7441c2ac126af67846ced334fb698ae82", 0x6d}, {&(0x7f0000004640)="f2887e51835200a66cb8b758b5e4a366ffe448c8670e255050fd200ccd6596d1", 0x20}, {&(0x7f0000004680)="7c3fdcccbf714fd9482fdd042c55297933afdac9c94d651f959071017fed2614068ed76aaf7bd16b9593d015296cba80438b23bbc4e45fff813174d3682a254a89", 0x41}, {&(0x7f0000004700)="237159c8e793297a0fb425f986b9c579897eeff81d1e882d017ff8f55b6541f40a64cac8790aa5bfc4a942a2f4ca7025a38c8d26d9332278fa40913e15ec5989e0a4c2ff3bddf148f246b2393c17a47482693449101e0abf14674c045a115ade9b25ea2ef4226bf07b08baa8d5dbb0a004b6c424340c72a81a79310592a6cdc73541b019781d0da52772f44c07bdc3ec61081c55267db10c7d9399f6dbde193c4681d6980e62300f21ec", 0xaa}, {&(0x7f00000047c0)="b4b205bf39d1f15ad575ae6c4747def29869b6211b27c3430f955df69a93697a43ffd5b6b276cae15a24f553cc926fdeb45a46bd8d37d19f85ae504f23853dd05acde366a75ef457bd5420de006d5a2388e02b8c1082d5aa164112fe35721ca2f8b55f0aa760684ad882c51751e99766ed32996f80c3ca561e2245c3dcd2aa54a3f9f3a254e59a8eb09a0315f84a6142c73c72e31845067ac99d926ed801d943c5bea1def58bdaf2e0cc9050b4c652688767385bfb60366a9b2447b07ea8160b4cd0de284c0e3099d658eefea93d90de31f0b636", 0xd4}], 0x7}}, {{&(0x7f0000004940)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x3, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)="66b28b3ae97ef0463d29265a5c2aa782ddacb99ac9775d8394408693d2f0dc12009e844717fbd2745da848ea27c9070a9484a125774eb7797bfaf44ba18e967425e554a6fece42d7a2d7c0225b744f1e5fb7a93c61bb1fc34936c232ad317b8a308ea310ad130c5676ee5b7ec574d15a81a89727dcaf1b41cb1c4640b7fbe6d5a0595bc820a232eaf1d939", 0x8b}], 0x1, &(0x7f0000004ac0)=[{0xa0, 0x29, 0x20, "ec668301564217c638ee9c06bd93238bde4b70e21337be736d1b5bdb4576ad4d0b2d01f1b74af37d55f3c825c7a873047c4d41da42f214873b3e961d98414b315a4e579342c415d4981df84d2124483a45bbd11592ee7cf8898c57db3381edc124baee5a9a6ebccd81ce32f096cd0dcfe5aba36602d1b95bd5f72b6486aaee1204d7fb61e06ba612b92c43e3f08e"}, {0xa8, 0x84, 0xffff, "ec3f6dc7c165660bd688d12460ba025331f5e2506f57d80d87e80f6c0d344784b61fbb99c0768c72281aad2010b98c1febcd0266a13bce2be8cf4ca34d749d386da3ad9fc0f1325b547c2748246203bb1d307cadb0a9d1a18774891da63fde09196fc5b827c134070f7551cd681738827fa4c4de2b9c16cd911011d918c2dd7a019a3b2fafc58493aa7b8a739f084befe0"}, {0x88, 0x117, 0x0, "7b154a9c78388c019953c8a87640e32e278ca337d542ab15e3a28ef997c13aab88cb8f9d36af662523fd8c00045caf0b1dc86ed8551da88ff9d355498cf34955faa42768a516e26e3fe4191bb589ccb3100253312ee62a0dc43acc44f48d3150dad1a1920b0cd5ed15e7eb6f1b428684ee"}, {0xa0, 0x107, 0x4e6c8000, "87242ddd82b3fe5723c01da3ea6e74761f996f3003a666f9c3e6d1e99dcf9c8bcdc9545596485197a628cfa01cc4e24d42d2bbb53440180b4808db59255c86bbccc6877b0ad4a9f8a7a4f572301de9af03fae6dcd85c466790e7e38f7b5f93b0841253993d9e670d14edcec4fe0d9a4267bbd28a8e0df1b21e0b4449087bd60b1b3730289ffbb4f84c5455f23aad"}, {0x108, 0x119, 0x3b8, "b71faf57eea3ba02fd99b27c8f718ff57d98187dc34e047e393c6cfa48aedcd771e670e7c990358a3331621f3d47df834a7dab944978fa1a31cbdd8be24360675c90ccbec8983d92c74b7e6b59f6951b9b88d0f665af6abe8b582ef9364f2da74130d47400e6c153e17fb13de0b3fa92cd98d67db75b08f35fcd18810b27086bc10aec3f2ed1f4909b958a51540cc8becc4a7d3b439d87f5973986d6dabe8c7c29a84e510dc7fd63a8f4a208d971ae14b1e1f680e676ce19b970ed25194f80b17c5b408af6e44a7f9cfc94f506de1c5a0caa2980a36911313e6740050849e218b7944ab1e8b605f43f2d3cadb1a3506799c52fc3"}, {0x108, 0x0, 0xd9, "dc66c3cbed51b37a2c2bdf249eb3a794042c707dbf05db3c81a15d91a72c885c868da9f195852b7e7fd4779caa0e337082ec71e387d2dc256ba65e922d51821d49bbef26a993147253bdcd77deaaecd6a73fbff44b6bd013d57361610ee8ef2cdcd63358c2f54ca06df27e51f7c3503104f13bf23d6ebf17708a0eab1035fc868616eed122dec4ae09423c58652542bef58dbdfd4281032376c5a24e8b2150bd4bfe9a580ce53092026c279cbec62ea8bfb02d3d8ad551a2e164e794ddb150ec50c1dc85080ba3ac9b6d6e4448d96d239cebcfb6a98f537b8243638db9edaf05f8dc47b44d6cbd67c886b8d7ac301883357c7697f3ba"}, {0x10, 0x10c}], 0x490}}, {{&(0x7f0000004f80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x80, &(0x7f0000005640)=[{&(0x7f0000005000)="9052887246b48697371063bf2002d158757a20086aa594fb4d5a9327eb595158b60d8dc62abab5527d79fdc27cffbe0205c4665a57de82", 0x37}, {&(0x7f0000005040)="f70101fb1aa6d18cbe34c0ea6b9fa3f65697ad97056dceac87eff1d39edd6cc5f453f7a7c67486dcdaecc600d49ac11874d8058373f8f349d3a94cf2f0b9470432aa37491df9f57ae6cd1e9bc68c9f4ec14b85967f13ca6e", 0x58}, {&(0x7f00000050c0)="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", 0xfc}, {&(0x7f00000051c0)="abc9889c34df0eb597f16693e83dd05640e4344d19c37974b6f6541611ad69815e213c1c71601486629be36499bd303eb2fd455ecb3373f96273a4bf0746b60c539fae0f3abbeb866d7f8bc196b4b35b20d9ea3ef779ebce2370826764", 0x5d}, {&(0x7f0000005240)="1b59c5e16cf259c15959b093ff7e975f65d109911ef267087e3e050b761c792e90f4d0f557ffbb1d2ed6aa94ea17f0743766d4d6d98029ed31cf487acb1e9692d241cb0be22f573c38ca13196d18299132304db3a9e18f94527fdfb9ae7360f361c8918b9f7e2a8e91d78a3ee75b6fb297590cc80f078f87d6280be8bd107874be2a19a955f7215a3f3ad5885282217e314c27b0bd1a7005561eda655dcaf4ff445945e866fa04f5546d712f1d0be7084817692b938b76bb4c9d5f3440702cc12adec2a1130e16701b7c6bdbf2ec99308132bbfe35e5391a0ad594d6ad6c677c30a2b68c63fddeab42806c", 0xeb}, {&(0x7f0000005340)="13d5a81a2c4d5efb07711ced93562f8be6afa04115d684136eebd69a143e53942826d706c734ba001786e5a581e2b4921f5ea73d1527174632fbe98f3d09852a0af39ae239fe23e02ab9a6ccf69aa5f7aca70eb9124f264f97b44006319c1b1a7b29280bef0d3866fedb9c2ae82ec838a0484ad7fe7e3e2d58c3f6b1598ec499bb7c563284a577050371e5aa3e5ecccedae8d7683ab0aa49eaf212e92ba3c577368a2846d7cc8bfa3d31fc9d7f6d6c9bbd984c3b6914f466dc2ef075cf2ac33edab4f93fd2c9c381bcf3480202442c89eebb7cda170dfafa5fcd6ebfe04fa44a89c2de86d9269b82f4ffedeec15f", 0xee}, {&(0x7f0000005440)="3005b576d8acbf3d99f16a6ef86f55d23e1aa4b0b98f57563276a010b84d814cbf9f30b6612d6cb09e6282807c93ffe22694d48f2f99fd8724e22bb026ebbd15864713233995cf877922c8091ba0e5d0d15cec9ce15b8b3f946f8e4f454f3c365e9348", 0x63}, {&(0x7f00000054c0)="0e669838328d8c4e5952cd80f8f709c9111dbb25c26d955ee3059783eded5bff912757354cbde7ac5f97051954691c71a635d602fbbdd0aa3dc74b712627dba533233247903f2876bc42114fab3e1430d3361bc15a63f7c15c0909ccf451bafce23775fb10b7ed85952cf0c99aef13f584fb2fadcf2e7e9e23313c7d8bcb7148ee104dcad241e9a09c3c861488a32614898235f57aa89d5f1dbf47edf7302f1ebcdd3339c27714e158c5957d2d6634f31cc494b7cbcfccc264", 0xb9}, {&(0x7f0000005580)="5f8d17b3934daaa0e7d02dc3358994d7085b49eca328fd3cc1b7c0ecc0c10c055775a23db06ea2a14d07a31285ee97b80311591ecee9914fb79eb687076101741279ffde39368114db2888336311df78c096506fc1808385cb88bc183409f30e96ce7b1c37fdf4553900c12a8609dd9e4b22a75b16180cfdb62f727accbe3e432f7b8062a3a21e663f0443fab530622daa254abcd0ecc9", 0x97}], 0x9}}, {{&(0x7f0000005700)=@ethernet={0x300, @random="f77f113d8632"}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005780)="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", 0x1000}, {&(0x7f0000006780)="2a9aff6bfd4a13ed192a8d4ba8d468489eb50cea9d004aff5ae5a5894264aab5e801ab587485073f8e5f8412f0409892d4f92b50de5d35183403c2049ff064c4857b96bd71c356f190fe22ae699955622354bdeedf60d4fcbf75ac81936f405ac8eb701d15c6024564244c552d8340eaf3fc125d12ef3bee0142f959d647f4c9ede525688a9ee748d641a4c1adb06cb9474beaf991a11d1b5a7d2d6df29fe8a21ca1b179e463ef23bd03cadda1ac537767b37f51b44347b9e43c1f4f86cfaafcde95ac8a59ca0c", 0xc7}, {&(0x7f0000006880)="b5ec9c58ce019ce1e1550392ecef77b5cb418a41237f2475add23b2b82597f34ae70dcc63f6f9df4e35a6a38b66b33d998ec3e39b2b6fb68b80278096e1d0496ba615903af3f864557020609e3cd9b4ef4613150faf3e7c6bf92c63d2f846e1331f9d05813ac491a47e37d136b5cb1a37ba755570d24ca2add94b1c3b9671df309d2840b200c917bb70601609bb3c67fadccee987c7e4472707da4f03f6c8481f192cad601ccdabf15f36f08a5f30510089eb183046654", 0xb7}, {&(0x7f0000006940)="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", 0xfa}, {&(0x7f0000006a40)="86178a78774733538923f8de4a16d9608009985832a8e91849d0c789a48913aab3f71848e777cfb57112adebd4b80dd0cf362cd2a916a06840db8eccb0f40def4a8eadd17ecd7b2499c616abe1e1a0660fb63a1ef8ad7a5668bf28cafb152d8196a60ba19b92b20683817d34c81a9ac4e2b451cea486637e5cf892f65139796d9f334872bebb142a4087e54f1d3aa0d738977c526ff1b792f9bf04d3a702bec9b96b69c2cbdecb4a59fcbbc84e1c23a0f3864065646773a16d0766cf33a5866317f62149663ef37806f73f339c", 0xcd}], 0x5, &(0x7f0000006bc0)=[{0xa0, 0x10d, 0x1, "fb8a5ab3e8c204ac58eabfc0aa74dbf9a15990fe93edbe34e2ea03d1b6fba69b4ac9e1f3e4234bad735ead8323db8c0920d5031469959de4d4f9d6ce31784feb6fe0033d14bb5c119ac5dd211b55d3a9b11b8e62b9f879e49a3d4f623e00466853fc80414cda1c11159a225ad2a564cd7ccfcc043dfeb57671d28b2c38779ab0483659210ab3cad30c34467e01ff"}, {0xf8, 0x100, 0x3, "53e1164ad500d31f442de21254896baf971abd79b9672c3b5513ea05aaaecf88be0885136828dcfc8838faff66533bcb83611ee47cc54f144372fc49bc1fb29d91bd8b1add581c1bc815de60200dab6e6696fd41c470fd2bff933fc725c5b99f8db39dbcaac1036dc0e4be991848ba4d489ea62af23a132cc2086b69aba8ebdf3ffbfade302a8f62b8b38acdd00b65ba2084b0df60c5210789b4ecc711c807bff1cbe610f0809867e6469b1b55a4eea0b7294ba5e20dbcdfdd6ac64e3852f5413aa00ef8f965b7a7f457ac75170b0dc799779219b7e0572783874edd4fcbca0cab"}, {0xf8, 0x108, 0xfffffff8, "8fb576fdaac45cae2517c2b089a8b663ba62e673bd247d16458aa3766ad5e46042641e08b1085328f8c1d48b2d15fc183e26338250ff5a980786172149445e79b37c2d9c03e3a24b2a140abe9def48b039844ce945dac9de0c46c06442c508a3555ebb444f97400d98112137b68cf793b1efb131d1e4f3f5d4bbc137a46c33720f988474b4b8f424a2fade3e0d971c56156bb7ac04db97652ec6e215eb8bc1d7d36d73c9aa8955f79af979ac8658a7110e3570cd2ec2f1b7462ff8c68eedcbe3e85b2f45b26ad2dd4f241dc4e0b74fbc9dcf95b2d7641789b32e9bb86a381eaf113dff4d"}, {0x98, 0x0, 0x4, "564063d63ff0b29d4948155e7ca2f0657a32009b793d6b59ebe8071bd339c6bb5ebf792c994af781938d27740331918de5ca1e167480389a46996b19345492f9379e58bb48b946006a91283f292788ad5749f35b38491c725a2c3d6b5493f015499b7769f39e6f8f10dac3c4c452f4f71053640458591e8b58cbddfa9deb95aaee24dae6"}, {0x60, 0x113, 0xd01e, "1c1d9f494b8e5dac5d01f7174b8f72de21df20427c39cc5c4c7ef76776079783aa51363b0d23bf142a7dda2588e8d57ef6850a048735a4324fb61441c264b8c81eb9a4d6642c03b627445bf8"}, {0x60, 0x10c, 0x9, "277c9f5391dda99e516805581cde507d8f09c4c65b5dc0d5a2ca57fc1c3f4926d892e3fc37180d8b52264bc8916074627caa0e36660556dd2c8cfb085b6b085169db68a083ba7f61d6b46468cd517342"}, {0x28, 0x10a, 0x80, "58ae2147923fff23c028ac3e6f4fa96683e230d8"}], 0x410}}, {{&(0x7f0000007000)=@xdp={0x2c, 0xf, r6, 0x3e}, 0x80, &(0x7f0000007240)=[{&(0x7f0000007080)="cbb64a77157d9ba29e56817108c0790a3088f9eef017788ddad8e2f85d7b61b1dd73509fef49a52764327422405ba908255a4e7c24261e85f671563c9456bfb8d108f63b7c15d701cc5aebe21dea918b2addb2c95a9cc8423d44", 0x5a}, {&(0x7f0000007100)="cdbaf76ab8d0eb75bb5722d872e97c00648c40c5892c16af74ee74c9767e919e75c6f466d3bd0520b9e8e2bdcfa6dc47e982ad7537cbc6c6c89f1d728c5ca9bd70b49c615cbc95c0226619c2d906fcf4f322c015e72a4e0dd5da2fb9ff86646372cf1e7483fa1aa5b58acbd9a4359cbe19ba07ed5c1d6184a88300ff145f7cc1ad037ed225e956357f7a212e80ed225712290a8b428dfbd33d9bcaa703c99023c63c057305ea385e1ff75865aaf5b606dce07678e22acbb0b0c3350eb78ad60301f81763ecd1b234f1810a", 0xcb}, {&(0x7f0000007200)="0a81", 0x2}], 0x3, &(0x7f0000007280)=[{0x18, 0x110, 0x100, "1256a5457f8f4eed"}, {0x18, 0x1a, 0xb6, "6ea3dec6f8d777c8"}, {0x88, 0x10c, 0x8, "d753646c0614875719360419047fd96a01c78fd76b61a4aa6f92e8414bc0486de507a60c499eb80af8134378fc0d3baacb6430bf00a4fa42d04dfc6dd16d29a09d6b22297dbb1a0092f9ec261c410635ff56c1a91469b7e2e7485dfc57ce0c90640d02c33723cc9fd86b22449490a000935c94bb"}, {0x110, 0x103, 0xfffffff9, "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"}, {0xc0, 0x107, 0xfffff801, "3f254ac7f3a23fa509e83eea61868630776c31b1bffe3661dae79cf5549c30e2aacede556176b9abeaf5dfa3117463f678f1376b201228e5bdf00c67a55bb1eebf8171f8411794ae396086bf436eaa20a4335e2e38256959d8c2e26321bb4d5e74cee568a790924c5158225ec48380a5540b480f5917e185376084525f14f333fe26912ab9c483373a02910936f5101234fe5a720473b93e22de255fbb8225fee3a706af904ebefc0f0202b6188c14"}, {0xc8, 0x29, 0x1, "8fa2d97bb3b2e54d8f7c8d240b4fd1958f8fac22fbfa18b45cebf48f538ab56bd0d82b2e1c8da43c7b67558fd8f92c4ac53b4e641248055f7a9d81920f3b31a5d6e61c95e215d9e4040a51133e0e02e1783cdfe52bfefbfc3b921c341c43dd112b12bba57c87182a64924ef2c63435b89c90b05f0b7e172b08cb36236d071eb8ecb817c7de143b629a36cbfbc013bc4252ab90c68ed40e9a690287db3d630b388661b089de25f4ec3c30835d9d0c5dd30e019868b658"}, {0xc8, 0x3b, 0x1000, "02a316b8d7961884e6ec4fcc21f669945feb3c37ba7c73d9ca0165c4f54209ffee3bf469f77b749e1f1f23b64881a892784c7c50e268527f4c868200efc3773996852276649376d4a2e30129b2423a888784435069876298eb82fb08f01caa44abc3f55d081fe622a59343d30719a7e58c83d4a489bc5e38141433179b11e8d43eaa943e6d6c35c46e2bd69ce7cf494fa80c5dd5b8d83426bd3cef9b67127b3d321334af493645a6f13082fe667c7491de1e496a999b"}, {0xa8, 0x107, 0x1, "04700b37f78be3e322a8b0d4cdb7a0392f323d5b392194dc4cf13e1333e531f52a1be36df47770c2370f0f9d601deef08193ffe6446f0456349998031540efd7d45599010b3c7907872b97cfae896072c92b89d4a8e3fdbedf98db0e4e92eeabacf49a7698413bb64775210af8537042245895cd2bdade96596d7d98842ee94f220b98cea904c61703cd2cd60c37d2d05178"}, {0x80, 0x103, 0x4d7, "f34d0bbb7d53fa90998efb9430074a8faeb86501183b2d7fa2a4cb91267b0dc837344a7fe4a68b7376c528b2409b68bc9fc7306a4bce1045b1782110232b645d6d5af8ddf26547845722b854a4f853060a91bcc89f80216273c27ed5be79ced1036ad74a942fd4ea031197fa38"}], 0x540}}], 0x6, 0xc000001) 07:40:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @multicast2}, {0x6, @multicast}, 0xfa791bd5ed0ec0c5, {0x2, 0x4e20, @rand_addr=0x64010100}, 'ipvlan1\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f093e579a0ad13bbfa6dfcf5f92e9137fcecd3422187adb2613d1cb2a10ac11024822cad9f16a8b47c13f163ae0a1beeec0926acde449fbfe0e5541045b2c313750354dae2754d46379a01c17bd3c8c6f824123ab7b626a841f31bee8284b373074ba53a7f519de6f", 0x69}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)="092cc8664dbfbbc985c216435f21a005997835bbeb7ba87af0bcc6e20b15ef20d589b8832916e48f1c02f5cb7e83f6162ad2e96509a05150bf7b44ae4168f20df6b3149eabf82300e4fe02c6ae", 0x4d}, {&(0x7f00000003c0)="b696966283edfe5216f6a91fb8d71648449478c9d4b0cdf197f347c27022cae24b59a04734172b45cbe216c81108551a", 0x30}, {&(0x7f0000001580)="c3ce444839943a87aa2cd33ddd3d1ef46ad4164efca50cf921bbf3afc0", 0x1d}, {&(0x7f00000016c0)="4706774e043c40ccadb0b4b1bc86bb383371823193cb31b3f12fc124643e69b09412e33d674a84033f5dab5f29229e401cdcfe80e66951", 0x37}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002340)="d52e73fe807ba67f0c39ff11641ec8d41bbc396dabad9714d79c8d0dc189535d8dd19ace9b3e64efdd09a9a3c4ce451bf439a7079a4af18c52279ffdc47befb7bedbd56e2acc270ebe0ee05ac59594f116ad79c1b690c24764a40b487c48102292de2c44c01f6ced6376fac9aa4d517f3cc2e7d2098f8d8af6ac476da1c48ced46157cdc441eac7d04a0a87151104e3c70879f0ee0d4f033d9a49124243f8f80b31bbcf5b23e04f97a00886925ca628b4f3e138269b6c194c5845b7f0259f509cfdf139daed41461f99ec421518cf354ed58dd8868a7133f42045a1bd6139aad115f9d82c3a049bc0d0be26df5cbeedd9f4b8f81614a4bdb4d793f08199f75c98b1820aef14952a87acbca182f90f1cad0c925bae90e8b0607421ebd47ac85b928c56ad4f59d2631c04823a9b55b948b2328ca7501ef3a4ec602d5f473803a102df034a6b758cf1e3c6668734117c73239812be0e6f5b7f00e9861a8c41b9b354a4e4899dda77bfb6502d2a69f65c75f1e0dc0eccc6052b7f7614db0f0f9a1753741964ed9c0b1fbb60acc028d9644b39307a493ab0121854234d7756780e1ddabc79b802d8872054b073c459e0760eccb055839abee7faf3e71171956c23ddec843996e1301eeb85838c60b5d9c4ff82ecbe3d358862d010af2c8565267e4500dc22a0b34c50309ed3ef56d89e6eeae89cb44f1fa7c4114b367bbcc647b845039c1dc190f84d5ca3760ca437841705213140f444a49178e2f678fd6bed6e3053c855be442009fb58821535c4493171b10dcbc2f54e5541a05f93598ef19f2d2280c399e96b32e03039fe75c2dd4fc0980385cb2610c30f570c560f85697549d61ad7fac5c8d74c3290da9c6c78df0b6f183bbf44675bb5398f20f932ff3c25531b9dc5c2b31502fc1a005117e351596afdf493199ca4d03235608917d7c4d028f6875ce60d210df94228e9d0bfb71f88a24885210f0d0d6a95750b88eaf29f3cbf84a195918dce326393ac266a74279a0b016a3fea18be5649fa567d0ea8a960eaaa728f1040431a1b3641a67a1a355d7add10ae025f9ddae7f621aac1967a2c945c1f630fe76bb143cd1e197c607d48f4c4445d0d0189a4e93e0cc9d6d4a403227b1be195eaa112cf488e163b12bd05d1a0dc48b563fe2b9e33d296fde41287bae5e80d09da26225e7662b63ddf7921db88d9ae9e28e7b7d43a800fba39d8821a0e64dfcb4b5abc13bdd8f8948622466876769bae7937c0648cbf1724c46187b5b58b1926da67c9cbc9cc5eec37ee67dfc2edd4b667f173197957891b8464386e385008a68e88a6a8bc94aa845af8784bb495cc418c21e78f5cb53b8a631bc46d3bd65f98ceb35d97cfdef1d560e48018ce51779abcfd34473e92abb081c7abb37ffef63af9d42f030a233fe149e1d9eb33e5229138a46657928cb9b487e4f1c732dff93522b44e4eac401220d0632a7227f6de5b0aeb52c2b5527a3d4a5d01728bb5747be8871d3159e3d69ed66790c16fa0a45465fb503f54adb4848013893872542898f5f2d21af50c6105e8dcaf4bfa058fd12b156cae1b4cba7e82e3053fad19c1ebeacc6db488620426cf5b19c31e430971442e41250129b656c4d9ea9c26baa695a9c1c9e5aa40f84896857f5388bac97e687ab75d1548bdfe196a6f2b69bc4917a6983b719f3c24c8ec2c77be296e70cbb5d594fca8420e2fce311350468a5e938dcec2c22bb93e0a85c234002c704dbb5df8428e90f2de2e0ab3f01dde91048cada917449856860d19ecb59046898bab0b2c098f9c120b04c172d8513819f253af31e69f41634c70d400873a4c53eef6329d49b35a352b04c01d12af23bd886c193d5ee66edbccee64e45802dcbb9f9d2a4ed11797c6e27f3837423b33eeb0f497801686810b17dec9ed9e664920567826c0dac83cafcdf77005610b6b6d15774cdc6929bc24b91aebcbd7d9740a16d3759fb59bb15248d8cad28d94eeffd8f42256fd99b31754d913daab8b786f700a93d56ffdc8313eec6b2e40553b95c493948ad93dcfcb869d673b45e7f5184a71ff5e7c65f1aef65ea17e367612f939cc2661e942d5a0e6844214a989d6d228d7db5e234f8132de027c1d87f98b35a7182317b41c5aefef161c6293b2fbb3576c8e10c280ac21721a61424aedf04f201a23b1d4c61446a665fd49be9cf7045b7e7586c133547cfdaf8ca86dc310abfcadb9902519925c1a9be94025e0f09b5845695d849d890a9c5eb60097c7f1d2f689615951db3ac7b83c6102128620668ff9990de7a9134acfafb3bba4d1463255892c751f87185ec0ae5aaa77890239c81062afaf2e8c26620377ed4e639ef8760f6a82c10f7f97e11f405b93ed3583544eff7296523767abe4fc9d032ddfa108660d65e0650a394727c90a7a4a6acb66efb8f128e47a7a3a09807c7af301c6f4353e5d12f4d805c5b5b9cb3144c92c7a7dfa7786fa6c9c07ab6e2cb0c0347d77d2a99533cd90898b7497eb7110a", 0x6f2}], 0x1}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 760.072144][T20533] bond244: (slave bridge477): Enslaving as a backup interface with a down link 07:40:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000117425013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 760.230371][ T29] audit: type=1804 audit(1599032404.785:1226): pid=20565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/556/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 07:40:04 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r4, 0x25}, 0x14) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x4010040c000) [ 760.344675][T20575] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 760.446353][T20598] bond245: (slave bridge478): Enslaving as a backup interface with an up link [ 760.473704][ T29] audit: type=1804 audit(1599032405.025:1227): pid=20618 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/511/memory.events" dev="sda1" ino=16384 res=1 errno=0 [ 760.516031][ T29] audit: type=1800 audit(1599032405.025:1228): pid=20618 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16384 res=0 errno=0 [ 760.553590][T20598] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:05 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100000c300006c0000000000000000000a20000000000a01000000000000000000000000e22387a10773797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a300000000008be8f847a64aa2448f672ac1aee1cb6504e5a170b4e7b342b0d4beded4a487f6bd55e32331c4c6bc5aa836bcf35ed95b66a7b3e22ebefa94cf83555ac8b4f3f4027edb59beca9"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x5dd) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000140)=0x7fff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendfile(r3, r2, 0x0, 0x100000005) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000005) 07:40:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000bd00) [ 760.659754][T20598] bond245: (slave bridge479): Enslaving as a backup interface with a down link [ 760.685116][ T29] audit: type=1804 audit(1599032405.025:1229): pid=20618 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/511/memory.events" dev="sda1" ino=16384 res=1 errno=0 07:40:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000117a25013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 760.778081][ T29] audit: type=1804 audit(1599032405.105:1230): pid=20620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/511/memory.events" dev="sda1" ino=16384 res=1 errno=0 07:40:05 executing program 3: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r0, 0x25}, 0x14) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001440)) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000001480)={'nat\x00'}, &(0x7f0000001500)=0x78) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="6a0fd90220d0ede48bf807d2d818b85b7cbe5860435ff7c0565ef9d96de0f8dfa0fa11debd0fa40d622da72e669b4800c40c49be1e6f13324e73a0a5f32b2069c0696f4a4d725f5934cdd223f9600ef3076b12ba9f31e23ee48ba326dceb25618726b2d319", 0x65}, {&(0x7f0000000100)="2eb80ad048a4baa5", 0x8}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="c8f1a876bb7ee8fe8a13cfd8e69ecf0b9ca097a85d00102448bc3f636ec7a2cf546bf54d83718d37b7bf1c420fe6f5ec5685612d5a999aa533f556ed33ba9e5bf338302e6c16d0836bff5a04f25cd8a837cfb4e8409d013a4f66b7f84820e8809905244a30929679d60fbbba9b62b04a30fa2f2605fe4f36ef9021c77908321d3433", 0x82}, {&(0x7f0000001200)="897cd42cfadeedc710fd22eb01bced2bc886f31dd07fb37c7bc7b5c029051e6e", 0x20}, {&(0x7f0000001240)="afb135184804a0a69fc92cf3b2c9aa73584ecf2f5d9082aa293b0be812cf7035881984c1adec122ddf2131a6335515eb6c949be9d0b775a6e3378a789030f4296efd79d0178d84bb9a32c8c04238c9427622b58cd983285afbe9a48446dec4ccaea0e834ee802360995112ad978ae701ad9c9f6d5f47339e516c8d374c9e4fce9e61624ad5f8fb28d6f4fa9d6740d0d8a391ed", 0x93}, {&(0x7f0000001300)="e322347259be89a7184ab84a4050084bb3b4f9d6d2bfe26060746836d7466fc03f1a8bfc1f411b25561fa36709aa63e48298d4f5370e842bbd378dc3e854e0163a330abb841e53425919c9915858d2ad35d765d2a037f36dd6b3b4d650978b", 0x5f}, {&(0x7f0000001380)="fd1ba7314c7d1c0443e57456670d903b43cfea4333b69967474cbabcfcc34a7bb4e2a3dbdb45cd4ffd8907f4", 0x2c}], 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='rdma.current\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@cgroup=r2, r3, 0x15, 0x5, r0}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) [ 760.902659][ T29] audit: type=1804 audit(1599032405.185:1231): pid=20620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/511/memory.events" dev="sda1" ino=16384 res=1 errno=0 [ 760.930402][T20635] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 761.087506][T20636] bond246: (slave bridge480): Enslaving as a backup interface with an up link [ 761.112284][ T29] audit: type=1804 audit(1599032405.445:1232): pid=20629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/557/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 761.215966][T20636] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 761.317112][T20636] bond246: (slave bridge481): Enslaving as a backup interface with a down link 07:40:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=ANY=[@ANYBLOB="54000000100005427641c4db9364a9d607000000", @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a00050014"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000300f1ff08000100753332"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r3, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3f, 0x200, 0x4, @dev={0xfe, 0x80, [], 0x27}, @ipv4={[], [], @loopback}, 0x7800, 0x20, 0x9c, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x2a4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "f96e5ee24b46793ee4428b152b0ecc2e93507e8b84c47dc4f31e9a772420e5ecc8bcd0a5a96aca91843ef11b18e07d4812047b707387c500c9b62690c59f83989d416df5b99a79606d7eb8f5e90aa23365b76510c3dae59927251c25448edfe7034efb63"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x164}]}, @ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x20, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1b, 0x4, "f5660a1e3c5eec3d082fcf30f32b8466659ca02796a10e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf, 0x5, "1263c061aa29ecee9bc479"}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "bc3adba6756f44463b3fe5ab19a1b49737374e3e3bad232c6809bd7e8faa9b7aa439d265a279e47a019853b3b47be3c94e2094405b35066a873bec54b6a9d432de57a8272c253c9b0a4cce11ac84a98740c6dc422a12b8bee3b991f6cc43d0832fcf51cbe0f061a3a48ccab066e1ceb8b16dba192534a5d2154d12234a3f1c19509aa38d7c2f8a179408c21d2870ee021d06da20f36dfc06e56c9967be476c09373e2b1864ea661fbdc0d499bf2e0395b1923bdde1682161dc0ab7a7fb70a2b719050b2fb2070e4406b2ca"}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "9f4cd5e80e9cf99c7b85cb80805d0d02547f5e0b8b04e98317658597e5e596e1b8cd4635ceae51b5f8ef05e921ad962269a363b785c4cfc45596b139"}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00042dbd7000076d48a49940bd54bdbe3e7cfbdbdf25000000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000844) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0xffffffff, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) getpeername$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x39ec, 0x4) syz_genetlink_get_family_id$devlink(0x0) 07:40:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvmsg$can_j1939(r1, &(0x7f0000002d00)={&(0x7f00000018c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001940)=""/27, 0x1b}, {&(0x7f0000001980)=""/126, 0x7e}, {&(0x7f0000001a00)=""/50, 0x32}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/45, 0x2d}, {&(0x7f0000002b40)=""/118, 0x76}, {&(0x7f0000002bc0)=""/106, 0x6a}], 0x8, &(0x7f0000002cc0)=""/29, 0x1d}, 0x20040) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000002d40)=@int=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x4002be20000}) 07:40:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000be00) 07:40:06 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="05f6000000000000000000000470ae7d26e79198c41b951fe2237d581efc90e81a018684a88caa7e20ef390530306f6b57f78a4d9a4a83faabe2929733a8d49bed5882f8a2cd4b01d83c6e07fbfe04186bc060b0abbce0da55a778efac5b286184c133f23f70b87f82d68b3aaa2aedd0b7fea45b69ffa4096417a6acc775eda6154be07300acef0cd68eadd890"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(&(0x7f0000008f40)) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="f42e037e06aca06e60700eeff17ada7076a693f87643981f24575b19d10feb276112c23b7fc756b724f3240bcdae7f0bd1cd83f3ea3da86146b062491516faf9d554e5311a65", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf84bb2500"/23], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)={0x40, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="fdd4", @ANYRES16, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 07:40:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110040013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 762.375737][T20694] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 762.398352][ T29] audit: type=1804 audit(1599032406.955:1233): pid=20695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/514/memory.events" dev="sda1" ino=16369 res=1 errno=0 [ 762.407743][T20694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.460580][T20701] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead 07:40:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000bf00) [ 762.547585][T20698] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 762.552656][ T29] audit: type=1800 audit(1599032406.955:1234): pid=20695 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16369 res=0 errno=0 [ 762.751701][T20705] bond247: (slave bridge482): Enslaving as a backup interface with an up link [ 762.797117][T20708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.826566][T20694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.855463][T20698] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x104, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2c}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '/%@+-@*.\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_BYTES={0xc}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x53a7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x11, 0x1a, 'hash:ip,port\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x2400c010) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000380)="3533f90a19fddbf725908122d82604bdf4b7a97f3e130c3c08c0dfa7e9bdf88d84a2363ab3aa03997fa371031c62d2b7d7564ce39f0af1c88bc724d8ef0ef1a5fb40214d10a4b2f2bbe81fa5eadc4fae456cc2ff130025838df2a9a852e31ef5599a15d04749843a8d1203a3a2cd6d030cee19dd6da1c519696a2fd3d786abb1819776adc9c568b9cfae527963040b48f0fc945d3eef33603a2db2279d51eec4f19e6c3520ec26a4c368d9a5126e1f53243728c9d44807d1daa9c20f524dfddc5634a4c99963de5350e4e6161edb5db2a6fc3e7d25871939d3") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x13}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) [ 762.943151][T20712] bond247: (slave bridge483): Enslaving as a backup interface with a down link 07:40:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005d013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:07 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x10, 0x3, 0x348, 0x0, 0x0, 0x0, 0x158, 0x158, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x158, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty, [0x0, 0x0, 0x0, 0xff000000]}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x685}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 07:40:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6(0xa, 0x80000, 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x4c, "8e3eca5eea88370fbde53eccdbba23a47d422c499edce2cb777205b3d704ca42ba80126275f7a905f83ad60290b96ce8deb8eee78d0e1f7e8c127108290f95010d4dc4f142b20fdb42f3630e"}, &(0x7f00000001c0)=0x54) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r6, 0x4}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f00000000c0)="1ad6c93070770306551eac0e7b75e409a9da2b7cbde01f5180", &(0x7f0000000240)=""/95, &(0x7f0000000100)="f8", &(0x7f00000002c0)="2774afe513e4bd65e2e92f735b86044c7dd521d014221e97", 0x8, r5, 0x4}, 0x38) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0xfff, 0x4}, &(0x7f0000000440)=0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000024000535d25a80648c63940d0724fc60040007400a000300091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 763.256158][T20773] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 763.486612][T20777] bond248: (slave bridge484): Enslaving as a backup interface with an up link [ 763.521994][T20811] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:40:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c000) [ 763.545923][T20811] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 763.560894][T20801] bond248 (unregistering): (slave bridge484): Releasing backup interface [ 763.572692][T20811] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 07:40:08 executing program 1: sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="67b46cd0d238ad1c670ab37f908085736ace139cf460479bc9c9cb9558a85bee2558b57de65ca51bbea95c47de546f3150fbb591d2f417ad4cba398b5d69e78f38e89c44a76041edcc6ddbc88ace4ce59c695f536fac042a1b2a1b688762cf7d2a0eea2d8b0effd9f797e25a971a2da9b25e336f9023bada033d42828fa70afb0ecab6118b7b5e000b", 0x89}], 0x1, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0xedcd}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xc0}}], 0x1, 0x20000005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xf, 0x1, 0xd69, [{}]}]}}, &(0x7f0000000200)=""/204, 0x32, 0xcc, 0x8}, 0x20) 07:40:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 763.749068][T20841] BPF:[1] DATASEC (anon) [ 763.764187][T20841] BPF:size=3433 vlen=1 [ 763.773114][T20841] BPF: [ 763.780996][T20841] BPF:Invalid btf_info kind_flag [ 763.793113][T20841] BPF: [ 763.793113][T20841] 07:40:08 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) recvfrom(r0, &(0x7f00000001c0)=""/208, 0xd0, 0x2002, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x2, 0x4, 0x4, 0x1}}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x7, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e2800002600055bd25a80648c63940d0624fc6010000a400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0) 07:40:08 executing program 3: bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000080)=@routing={0xff, 0x6, 0x2, 0x7, 0x0, [@empty, @mcast2, @private2]}, 0x38) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 07:40:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c100) [ 763.979441][T20801] bond248 (unregistering): Released all slaves [ 763.996028][T20848] IPVS: ftp: loaded support on port[0] = 21 [ 764.169754][T20820] bond248: (slave bridge485): Enslaving as a backup interface with an up link [ 764.193260][T20890] bond248 (unregistering): (slave bridge485): Releasing backup interface 07:40:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c200) [ 764.518764][T20890] bond248 (unregistering): Released all slaves 07:40:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="54100000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250300000008000200020000000800010002000000080001000100000008000100030000000800010003000000080001000000000008000100030000000800010002000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff11, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000200)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x41}, 0x39, r1}) [ 764.589993][T20848] virt_wifi0 speed is unknown, defaulting to 1000 07:40:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005d013700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x64}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xd1, &(0x7f0000000100)=""/209, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket(0x1000000000000010, 0x80802, 0x0) sendto$isdn(r0, &(0x7f0000000200)={0x6618, 0x3, "8b02e6ffd35d273ca3b0adbe336ddc20621f4ce4e07da848906de681f8d538af0a0f5cfc8a1eaeaf435cd2aac17bbed4b4e1c84451e4a92b2964b04c2a3706c5cdcab5b3e90e1e25f6f8001884feeac7042f17a54143bc836c66c4dc2bb2a633438f17212b34e9d40a2396482d2ef3ac2e3ea5da7eaccfd36e8ac2ac278b30fbf4a897c928db70acf4d1acf0b2c4262c0fc040955c2c46eba54a6bd04a355170b9cd0f160a15c423ead12a3751a649c1339d57575949c54f4e04ae3444d2a8338554aa19dab0043e91503fe19bd7152d"}, 0xd8, 0x8004, &(0x7f0000000040)={0x22, 0x5, 0x3f, 0x0, 0x7}, 0x6) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) [ 764.755192][T20850] IPVS: ftp: loaded support on port[0] = 21 [ 764.867307][T20850] virt_wifi0 speed is unknown, defaulting to 1000 07:40:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c300) 07:40:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = accept4(r0, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80, 0x80800) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xbc69dd06c55d2755) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x13) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100730010000000028008000100935e90c9e487afd448b6dced0e9b9dd2f627555584f481becb4f7c04bbd08d", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) [ 765.088193][ T244] tipc: TX() has been purged, node left! [ 765.113368][T21014] bond248: (slave bridge486): Enslaving as a backup interface with an up link [ 765.175685][T21031] bond248 (unregistering): (slave bridge486): Releasing backup interface 07:40:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="54100000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250300000008000200020000000800010002000000080001000100000008000100030000000800010003000000080001000000000008000100030000000800010002000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff11, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000200)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x41}, 0x39, r1}) 07:40:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c400) [ 765.470127][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 765.470165][ T29] audit: type=1804 audit(1599032410.026:1248): pid=21069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/564/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 765.547996][T21031] bond248 (unregistering): Released all slaves [ 765.668198][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.692302][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.738852][T21014] validate_nla: 2 callbacks suppressed [ 765.738860][T21014] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:10 executing program 0: socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000002) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x4, 0x8, 0xfc26b8255a7b012, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000ac0)=0x5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty={[0xe]}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x48040) bind(r4, &(0x7f0000000100)=@phonet={0x23, 0x3, 0x5, 0x3f}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="050400000000000000007e"], 0x14}}, 0x0) [ 765.863212][T21049] bond248: (slave bridge487): Enslaving as a backup interface with an up link [ 765.923739][T21116] bond248 (unregistering): (slave bridge487): Releasing backup interface [ 766.119514][T21116] bond248 (unregistering): Released all slaves [ 766.166065][T21160] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 766.197992][T21160] gretap0: Device is already in use. [ 766.230627][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 766.246854][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 766.275792][ T29] audit: type=1800 audit(1599032410.836:1249): pid=21160 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15750 res=0 errno=0 [ 766.299630][T21158] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 766.321527][T21158] gretap0: Device is already in use. [ 766.383123][ T29] audit: type=1804 audit(1599032410.866:1250): pid=21160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/518/cgroup.controllers" dev="sda1" ino=15750 res=1 errno=0 07:40:13 executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) socket(0x80000000000000a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="07070000000000000000020000040b0000009e3330"], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x7, 0x0, [], [{0x5, 0x5, 0x3, 0x8, 0x80000000, 0x1}, {0x808, 0x7f3, 0x8ec39a2, 0x6, 0x4, 0x6}], [[], [], [], [], [], [], []]}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100005003) 07:40:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025040000000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c500) 07:40:13 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in6}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000acfe04bd00", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf250700000008000c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x24000081) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 07:40:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 768.744514][T21225] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 768.853077][ T29] audit: type=1804 audit(1599032413.406:1251): pid=21233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/565/cgroup.controllers" dev="sda1" ino=15905 res=1 errno=0 [ 768.895823][T21230] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 768.897110][ T29] audit: type=1804 audit(1599032413.436:1252): pid=21257 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/519/cgroup.controllers" dev="sda1" ino=16033 res=1 errno=0 [ 768.978835][T21231] bond248: (slave bridge488): Enslaving as a backup interface with an up link [ 769.043078][ T29] audit: type=1804 audit(1599032413.476:1253): pid=21270 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/538/cgroup.controllers" dev="sda1" ino=16017 res=1 errno=0 [ 769.055394][T21230] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 769.104537][T21256] bond248 (unregistering): (slave bridge488): Releasing backup interface 07:40:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x3, 0x80000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e23, @broadcast}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070a00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f8, 0x400, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x884}, 0x4010) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r5, 0x25}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002e0001000700"/20, @ANYRESOCT=r5, @ANYBLOB="00080080000000000000f1"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) socket(0x1000000010, 0x80002, 0x0) 07:40:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c600) [ 769.541371][T21256] bond248 (unregistering): Released all slaves [ 769.644996][T21231] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 769.656339][ T29] audit: type=1804 audit(1599032414.216:1254): pid=21288 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/566/cgroup.controllers" dev="sda1" ino=16082 res=1 errno=0 07:40:14 executing program 3: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x4e23, @multicast1}}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f00000022c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x58}, 0x0) [ 769.746889][T21286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.885322][T21365] atomic_op 00000000eb3d55d6 conn xmit_atomic 0000000000000000 [ 769.914684][T21271] bond248: (slave bridge489): Enslaving as a backup interface with an up link [ 769.929022][T21370] atomic_op 000000004db6c049 conn xmit_atomic 0000000000000000 [ 769.970249][T21324] bond248 (unregistering): (slave bridge489): Releasing backup interface 07:40:14 executing program 3: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x4e23, @multicast1}}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f00000022c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x58}, 0x0) 07:40:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x9, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r5, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r5}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001280)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e20, 0x9, 0x4e20, 0x0, 0xa, 0x20, 0x0, 0x4, 0x0, r5}, {0x80000001, 0x0, 0x2, 0x1, 0x10000, 0x170, 0x8, 0x10001}, {0x3, 0xffff}, 0x6, 0x6e6bb1, 0x1, 0x0, 0x4}, {{@in6=@private1={0xfc, 0x1, [], 0x6f}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3507, 0x0, 0x1, 0x8, 0xed, 0x0, 0x2}}, 0xe8) 07:40:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c700) [ 770.160386][T21377] atomic_op 00000000c563aa87 conn xmit_atomic 0000000000000000 07:40:14 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd609faa7d00442f00fe8000000000000000000000000000aaff0200010420880b0000000000000800000086dd"], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x25}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001480)={@map=0x1, 0xffffffffffffffff, 0x1d, 0x3, r1}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x8d0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) r6 = socket(0x1000000000000010, 0x80802, 0x0) write(r6, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$nl_generic(r6, &(0x7f0000001440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000000340)={0x109c, 0x3b, 0x400, 0x70bd28, 0x25dfdbfd, {0xb}, [@generic="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", @typed={0x4, 0x54}, @generic="b5c89d47ac3d5273d072d3087e22b3c73ed6a26119da67a55096d0e8cd8841831c1ca66d6dc4854fea2dbba03a2144f17096109157e2ab7f99b3dd62b60a7958cefe9a59a9775a75", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x42}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x22, 0x0, 0x0, @u32}, @generic]}, 0x109c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 770.222692][ T29] audit: type=1804 audit(1599032414.776:1255): pid=21376 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/520/cgroup.controllers" dev="sda1" ino=16033 res=1 errno=0 [ 770.374222][T21324] bond248 (unregistering): Released all slaves [ 770.389507][ T29] audit: type=1804 audit(1599032414.946:1256): pid=21382 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/567/cgroup.controllers" dev="sda1" ino=15873 res=1 errno=0 [ 770.470748][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:40:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025023700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000140012800b0001006d61637365630000040002800a000500140000000000000008000a00", @ANYRES32], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x2) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 07:40:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c800) [ 770.681689][T21434] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 770.810726][T21437] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 770.890529][T21438] bond248: (slave bridge490): Enslaving as a backup interface with an up link [ 770.900016][ T29] audit: type=1804 audit(1599032415.466:1257): pid=21485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/568/cgroup.controllers" dev="sda1" ino=16065 res=1 errno=0 [ 770.951739][T21466] bond248 (unregistering): (slave bridge490): Releasing backup interface 07:40:15 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001700)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f00000015c0)=""/69, 0x45}], 0x7, &(0x7f00000016c0)=""/22, 0x16}, 0x40000020) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0xf0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xc0, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xb0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x200}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5a, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe01, 0x3c2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x20000009}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xf0}}, 0x0) 07:40:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c900) [ 771.278869][T21466] bond248 (unregistering): Released all slaves [ 771.291910][ T29] audit: type=1804 audit(1599032415.846:1258): pid=21492 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/569/cgroup.controllers" dev="sda1" ino=16050 res=1 errno=0 07:40:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000c800) [ 771.673515][T21437] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:40:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ca00) [ 771.719491][T21434] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) r4 = socket(0x1000000000000010, 0x80802, 0x0) write(r4, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000001c0)=0x8, 0x8) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0xef7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x1000000000000010, 0x80802, 0x0) write(r5, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0xa41e2e50e25f9795) [ 771.944036][ T29] audit: type=1804 audit(1599032416.506:1259): pid=21555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/570/cgroup.controllers" dev="sda1" ino=15857 res=1 errno=0 [ 772.068161][ T29] audit: type=1804 audit(1599032416.536:1260): pid=21550 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/524/cgroup.controllers" dev="sda1" ino=16082 res=1 errno=0 07:40:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @private2, 0xd}, 0x1c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) connect(r0, &(0x7f0000000040)=@un=@abs, 0x80) 07:40:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025033700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x7fffffff) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x0, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d72d4786", @ANYRES16, @ANYBLOB="020054934b8fe4494f1634b70000e71f42d9c1ba677f00000800020000003b7078b6d4bae4000011980e530b65858a8a85205cb7516e26ba6c83b98c156b7cd743e26daf1c9c78ca41266ff68566d8f4abe6ac0d00"/99], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) [ 772.442808][T21573] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:17 executing program 1: r0 = socket(0x18, 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x148}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="23fffffa", @ANYRES16=r3, @ANYBLOB="010000000000000000000500000008000300000000000800020000000000"], 0x24}}, 0x0) 07:40:17 executing program 3: socket$inet6(0xa, 0x3, 0x2) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x268, 0x250, 0x250, 0x0, 0x0, 0x350, 0x420, 0x420, 0x350, 0x420, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x2000000f}}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bond_slave_0\x00'}}}, {{@ipv6={@empty, @private2, [], [], 'batadv_slave_0\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "b4e7938e9dcf3c17f4ab94db992f50a32a665b3d2fcae3bc33eb37081bbe"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) [ 772.636090][T21589] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 2147483647 > max in inode 15841 07:40:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) write(r1, &(0x7f0000000080)="243d5923a33935554180ec91721997d100001f000000000000720000806d91e70000", 0x22) 07:40:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000cb00) [ 772.735264][T21575] bond248: (slave bridge491): Enslaving as a backup interface with an up link [ 772.832655][T21592] bond248 (unregistering): (slave bridge491): Releasing backup interface 07:40:17 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0xac}]}}, @timestamp}}}}, 0x0) [ 772.953586][ T29] audit: type=1804 audit(1599032417.506:1261): pid=21632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/571/cgroup.controllers" dev="sda1" ino=16082 res=1 errno=0 [ 773.255928][T21589] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 2147483647 > max in inode 15841 07:40:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000cc00) [ 773.401878][T21592] bond248 (unregistering): Released all slaves [ 773.505656][T21573] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:18 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) clock_gettime(0x3, &(0x7f0000000040)) [ 773.589994][ T29] audit: type=1804 audit(1599032418.146:1262): pid=21676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/572/cgroup.controllers" dev="sda1" ino=16209 res=1 errno=0 07:40:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x1, [], 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7fff, 0x10}, 0xc) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff7c, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010301003a5900df00000010e9000500010005"], 0x1}}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000180)={r7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r7, 0xffffff81}, &(0x7f0000000140)=0x8) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 07:40:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025043700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005d0bee210068d47b2b262e9c592560a65e2e8646542070000000000000000000000003c6062676a9255502e1d312f24539a19eec5d5c5b36fae4637999953a29aa0d966f7e694d9aa721d6fac14b66047c4328b5f6ee7f95e63aa5df4f462c296a54d9ebb19fa0304a9eaac7dfffab28bab39c33f521b2ccf44397d4f4e44d3f93a9f3fa3c6cc77ee273b9eade03d423bbf96b42dd3989c042842ec912381c3cc61350c538e5dd13ee73facf09b748daae0c0ea7a4d30ac6234f8bbf5", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 773.834975][T21690] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 774.041074][T21691] bond248: (slave bridge492): Enslaving as a backup interface with an up link 07:40:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000cd00) [ 774.119239][T21715] bond248 (unregistering): (slave bridge492): Releasing backup interface [ 774.328646][ T29] audit: type=1804 audit(1599032418.886:1263): pid=21740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/573/cgroup.controllers" dev="sda1" ino=16193 res=1 errno=0 [ 774.476439][T21715] bond248 (unregistering): Released all slaves [ 774.547380][T21716] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 774.578239][T21735] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.657715][T21738] bond11 (unregistering): Released all slaves [ 774.713938][T21691] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ce00) [ 774.801368][T21730] bond248: (slave bridge493): Enslaving as a backup interface with an up link [ 774.903619][T21715] bond248 (unregistering): (slave bridge493): Releasing backup interface [ 775.034266][ T29] audit: type=1804 audit(1599032419.596:1264): pid=21884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/574/cgroup.controllers" dev="sda1" ino=16193 res=1 errno=0 [ 775.298541][T21715] bond248 (unregistering): Released all slaves [ 775.357245][T21735] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 775.383948][T21880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 07:40:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000cf00) 07:40:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025063700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x9, 0x1, '}]^^\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) r1 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000000)="b2", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) [ 775.565809][T21927] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 775.598506][ T29] audit: type=1804 audit(1599032420.156:1265): pid=21923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/575/cgroup.controllers" dev="sda1" ino=15694 res=1 errno=0 07:40:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa01008d34f880200000000000000062a4f7b60000ff0200000000000000000000001d000100004e2000130200"/61], 0x0) [ 775.685407][T21929] bond248: (slave bridge494): Enslaving as a backup interface with an up link 07:40:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create(0x70a) epoll_wait(r4, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0xfffffffb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32, @ANYBLOB="0000001f00000000280012800a00d003beba5ae372dce5096f0165c7cd8d616e"], 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) [ 775.852429][T21927] bond248 (unregistering): (slave bridge494): Releasing backup interface 07:40:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d000) [ 776.113828][ T29] audit: type=1804 audit(1599032420.676:1266): pid=21978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/576/cgroup.controllers" dev="sda1" ino=16145 res=1 errno=0 [ 776.223129][T21927] bond248 (unregistering): Released all slaves [ 776.363655][T21929] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:21 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x2880008, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) accept$inet6(r2, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) [ 776.462723][T21962] bond248: (slave bridge495): Enslaving as a backup interface with an up link [ 776.569407][T21929] bond248 (unregistering): (slave bridge495): Releasing backup interface 07:40:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d100) 07:40:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100004c00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8100635b36ddd74531032c05fcbc2947aed2ac30ffa106fdaa180d861e2d8a930182dc1960abadc319df0649d01cf4ad1b4233a3da43e64107141be6ee1274607afe4702943bdd3649c32f050386be563cee95f5a6492283f5d4d13adfa5f49316c49db235e29189ccb682407e27cc1a4d76217accc2c06389f4614acf13a100e67fd8a1eefd73554bf5ab7682e5b09213f758e5143cbd88b8e79a083c26ade9"], 0xa0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000080)=0x10000, 0x100) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 776.837797][ T29] audit: type=1804 audit(1599032421.396:1267): pid=22064 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/577/cgroup.controllers" dev="sda1" ino=16145 res=1 errno=0 [ 776.954010][ T29] audit: type=1804 audit(1599032421.506:1268): pid=22067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/530/memory.events" dev="sda1" ino=16337 res=1 errno=0 [ 777.013386][T21929] bond248 (unregistering): Released all slaves [ 777.107426][ T29] audit: type=1800 audit(1599032421.546:1269): pid=22067 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16337 res=0 errno=0 07:40:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025073700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 777.262745][ T29] audit: type=1804 audit(1599032421.546:1270): pid=22067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/530/memory.events" dev="sda1" ino=16337 res=1 errno=0 07:40:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d200) [ 777.359284][T22106] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 777.424212][ T29] audit: type=1804 audit(1599032421.666:1271): pid=22086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/530/memory.events" dev="sda1" ino=16337 res=1 errno=0 [ 777.638332][T22108] bond248: (slave bridge496): Enslaving as a backup interface with an up link [ 777.665259][ T29] audit: type=1804 audit(1599032422.226:1272): pid=22149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/578/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 777.723441][T22110] bond248 (unregistering): (slave bridge496): Releasing backup interface [ 777.854776][ T29] audit: type=1804 audit(1599032422.286:1273): pid=22086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/530/memory.events" dev="sda1" ino=16337 res=1 errno=0 07:40:22 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100004c00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8100635b36ddd74531032c05fcbc2947aed2ac30ffa106fdaa180d861e2d8a930182dc1960abadc319df0649d01cf4ad1b4233a3da43e64107141be6ee1274607afe4702943bdd3649c32f050386be563cee95f5a6492283f5d4d13adfa5f49316c49db235e29189ccb682407e27cc1a4d76217accc2c06389f4614acf13a100e67fd8a1eefd73554bf5ab7682e5b09213f758e5143cbd88b8e79a083c26ade9"], 0xa0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000080)=0x10000, 0x100) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 777.984079][ T29] audit: type=1804 audit(1599032422.306:1274): pid=22151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/530/memory.events" dev="sda1" ino=16337 res=1 errno=0 07:40:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d300) [ 778.144176][T22110] bond248 (unregistering): Released all slaves [ 778.145513][ T29] audit: type=1804 audit(1599032422.706:1275): pid=22157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/531/memory.events" dev="sda1" ino=16337 res=1 errno=0 [ 778.248706][T22108] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001e0a4eb628c659a2ffd5e0c7cb40076653468000003000000b00cf2003b088d642778000086abb64d9cabaeb73d62aca6f852aa21f85b6051f833f8f45b3b582956d1e8347ebccd24ea629e00000000000000", @ANYRES32=0x0, @ANYBLOB="b920000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x14040080}, 0x0) [ 778.446535][T22126] bond248: (slave bridge497): Enslaving as a backup interface with an up link [ 778.474218][T22194] bond248 (unregistering): (slave bridge497): Releasing backup interface 07:40:23 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x2880008, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) accept$inet6(r2, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) 07:40:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d400) [ 778.893926][T22194] bond248 (unregistering): Released all slaves [ 778.982589][T22237] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 779.021561][T22276] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:40:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025083700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3d8, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7fff}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x3}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xe0}]}}}, @IFLA_VFINFO_LIST={0x350, 0x16, 0x0, 0x1, [{0x4}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x20}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xee4, 0x4}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0xc7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1000, 0x10000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @broadcast}}, @IFLA_VF_MAC={0x28, 0x1, {0x626, @local}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x6}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xd8c, 0x2b5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x40}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0x5fb, 0xe04d}}, {0x14, 0x1, {0xbea, 0xd9b, 0x146881c7, 0x8100}}, {0x14, 0x1, {0xc5da, 0xff, 0x2, 0x8100}}, {0x14, 0x1, {0x3, 0x4ab, 0x9, 0x88a8}}, {0x14, 0x1, {0xfffffffe, 0x5ed, 0xa61}}, {0x14, 0x1, {0x6, 0x3f6, 0x9e, 0x88a8}}, {0x14, 0x1, {0x6, 0x880, 0xae46, 0x88a8}}]}]}, {0x10c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2ce9ba6d}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x928, 0xfffffffd}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x3b2, 0x11b, 0x8100}}, {0x14, 0x1, {0x80000000, 0x34d, 0x7e7, 0x8100}}, {0x14, 0x1, {0x88000000, 0xcf3, 0x1, 0x8100}}, {0x14, 0x1, {0x5e8ee759, 0xc7c, 0x81, 0x8100}}, {0x14, 0x1, {0x0, 0x8f2, 0x401, 0x8100}}, {0x14, 0x1, {0x400, 0x10c, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2e3, 0xb43d, 0x8100}}, {0x14, 0x1, {0x0, 0x6b9, 0x0, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5123363e, 0x7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0xa8dc3873, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3f, 0xffff, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2000400, 0x8c}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x4}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10001, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xff, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x962, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x8001, 0x28e9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf5b, 0x1f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x7}}]}]}]}, 0x3d8}}, 0x0) [ 779.169146][T22278] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0', "52f87464329e96325c41e8e5c45023301993a434c6d6c6c82b32ace6f20a134c709de4e8e9727bc3a2b6e9bc1329359c8c46c2b1899302f677a8594df2056e3c4318953cf0958c7db4555b7c208b39f5dc6a93bc55ba472ed3c984b87da2dabc57759d8900"/114}, 0x76) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6772e5300000000000000000000000005fac38d509fa6fb4f60decd7a39336917202406da5ae73f77db7e7345d39d14be7c88ec0ffc52d5c4a263af738d2d0692027df3ba6dfeeb44ce7874fd89b19a8925723282574a39b31ca0d7a9e2d6fc255dda06d8165ee790ea997c4456a52a91fde4d35a86bdaaa071389642ba965", @ANYRES32=r4, @ANYBLOB="00000000000000000000000045000014000000000000907800000000e0000002"]}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x1}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) [ 779.384585][T22282] bond248: (slave bridge498): Enslaving as a backup interface with an up link [ 779.420932][T22300] bond248 (unregistering): (slave bridge498): Releasing backup interface 07:40:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d500) [ 779.841054][T22300] bond248 (unregistering): Released all slaves 07:40:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r4, 0x25}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{0x0, 0x0, 0x9, 0x9, 0x8, 0x4, 0x1, 0x9, 0x55, 0x6, 0x9d, 0x277, 0x6, 0x20, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000001c0)={{r5, 0x0, 0x80000, 0x80, 0x4, 0x4, 0x6000000000000000, 0x7, 0x9, 0x7f, 0x9, 0x58dc, 0x1000, 0x0, 0x100000001}, 0x8, [0x0]}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0xffffffffffff7fff) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 07:40:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d600) [ 780.094741][T22278] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025103700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006040)={0x0, 0x0, 0x0}, &(0x7f0000006080)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r6, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r6}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) sendmmsg$unix(r2, &(0x7f00000061c0)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="201fff2a5232f559924575ba99e085ff112e3159f2745e30963d4abfb706d6431feb98cd0173fb3a61ff99790e471035742fe653d56ee8816f0f2a0231e5c044df67c21a9b6dddd40bed123efc78ffdfbd4f958e9c2a192da041276b39eb22b9507d9a85ed1c533de752ccf1924dab8fe11d60ef37639d212ffdcbc3199623fce4e1be81f60bcaccdfc14328e342dc089770dcb7fe", 0x95}, {&(0x7f0000000000)="7d19504a9aaac0ce34a8", 0xa}, {&(0x7f00000001c0)}], 0x3}, {&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="d03431c90e623c974a2018aa654de2f866734a2f27a39dadce0b2f7b2499c09b0451ed21ee1b63e134ad5add88c6741389d358d40c6cebfb6e2ccc3abb62466b0fdf79d21f42d03ede28b43c3c38d772d475af9a21fad4e253d64fb6dc9b048f683568c271608a9e640309db936f2d81e1a8f776a953da7f9b39b2752c34f59cff2999f135554105d9a07e94dab6bf5702d64f74093a47162cd51e8595408fcf78c1fdfcd2de603862bf848654c6e3925b89739b9e6f28a3be2c2394cfb4766b05521f70da", 0xc5}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c}}], 0xc8, 0x10}, {&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000006c0)="0e090fd2c76caf9c8130992aa4fc9a2a423b404e40a91e66db4e74fb887caeec5f6df3dcd53c00116b", 0x29}, {&(0x7f0000000700)="5d9880ef231a98f7dd73ae6a778053c58bdf3a3e6d8d758823aa8f68bc33e4b4af48656bfe2c8e371fbe422389caacb7eac364e9b56bdd6353de32e89004eb95a4e7158e98b0bdb5196a2bc8f45e1965fd4c3c98fe658781b32ac9727761fc062b63202ae5ce5586b074e25a25", 0x6d}, {&(0x7f0000000780)="b5c5766b2bc5296c6bb5ebda3318b0b1acb0ddf79637c3473d9b1163454c2311590888e90bd7e6aa2fcc83cb544f6d83427da1f62670387ebdec620a46f6cbd777e65d0fdd4abe47ee593f", 0x4b}, {&(0x7f0000000800)="c8382ac230c8040fddb74e9d21d981551631774882ffa0665d02c3a5da2bdbc5178939d8a68d", 0x26}, {&(0x7f0000000840)="339cf09f1eb2f62b4e6a2c98a5277d3813e305cadffd275b0281f278b267aad130900c14b8f40b9f43bd4fe92bf99247d61c04a989c63b09f0cee3c89d326701b65c5abd1fb2c3bc8160ea12db36a6a67d2c79214a0bffdc538bab25a2d33915d32b78dc9e9bf71f6a45b984044fd2a9eab438493e9dcbff18d8563aca8ff8149cd443ebc1d71cc90bfc617394ee60a1", 0x90}, {&(0x7f0000000900)="9c0de923679e09702363c21893545da2c70c0d8c3cd26464cc05c051988bbc61daaec394502bdf0ad167c59132a0141fb9f072ac5c7f79e3729d271add55e851a9e88b203064302a40dc30e397f8376c9b129d4e2b5c0ac2403caa380b43893da494c5bdb4cd59648044c95f8057ca915478084ee63d2d9df7a0ba1a4c451ed63c31ca3d96d78a16d77bc95dabc239ac1d05a926ce809f3b20c6ecaefcc9d5df", 0xa0}], 0x6, &(0x7f0000000f00)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x138, 0x40}, {&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000010c0)="e9ccd7604d3bf56581dadc62da6d92765b93c2802ec29edd477346", 0x1b}, {&(0x7f0000001100)="e23dfd08c00685e631176fbd2be1dc0dc594890611dac2cbfd0f9930abacb636c41a30cd06a567497246aa45e47bdf3f9a7c99ef90b4e7d63df300cab32c680497f4d3b9636e916e3cbbedd6b40d091fb4d1c4494ae7ef20c072fe3abd4b0ea2191144c7714386af4b211090aaa82676b81908774dc30a92189be1b2cf2b89d6aafff4ebfddeb206fbe3fada2f3e2dfc68c7632cfe3c7fcfc07511c542a531940885aae7955670930e43190179ca9024321a9944e829cb51c35014daafc94f3614d1982c1dc89e9906c28c6b85dd15f1b9d8e2637a09", 0xd6}, {&(0x7f0000001200)="08c0c50ea9e8784a5d25eb1a3384a61ecbaca862649440a072324fdea0de28273324d670c048eb4395e2f465145c7912451768ca8557ce6547084b37091a58a19dfa026e75f76a497643cd4a083262f48901508d00df8ebf0b2b2651dd8e405867120caf52a8d5a76ea6de1abda80a710b41c9aa5bb378097ba49d4c9af46a79e5b2cdc7a3a7c26ba357d685204db1daaf19c9f0d1113b7b939dc69eb6ecac28ebf54a1c8dcc51ce0ee25ba8179efb5e87e80d57cad892b19f934dfb569314b53a9d5b0fae", 0xc5}, {&(0x7f0000001300)="c30bdb6e999be763511cc97bfb359455a256e8ace36d60ce0683087897d0514bf2ee51e8e838bd795b2661afb5c7d2fd47cee65aae99946e9aee1c5fca", 0x3d}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="df551ed1c6b4fe3ac3801083cd0b5af8c5dab54d4e28fc36e52dd50bd52f72e71a29ca4828b6b2132d2af8cadeb90c88506e09983c4ca2423d3b5c0ceecc0de32b79065f43e2d7bd65f27ccc1cc7e7c9fed82d329dc7a36ad0c8a7", 0x5b}, {&(0x7f00000023c0)="f51532bf77a00bb0b34bd3458a880144e8b56b5a5e52908965d00479ab0fd6900777b8859035a0a43ca8919fe0b1f579cb9fe424", 0x34}, {&(0x7f0000002400)="a368a99efb6b4d45500542fe1c0682e7a5e2011e53242f0524f1", 0x1a}], 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000be375ee0a1666ebce017d51856114af61d7fe8a65871c19135bd41a01384962caadf5c6740c89aa6b1b1ffffde383718c7a06344799c3d688dca123aabf1bfee0004d1927ea17e38eeeb1d214c98ec23221037998edf3dffad90ea19a476f8595cf8c2cfa35b81543df37ba788402581ec8f7411c7e8813c6a80d509ffec348ba6af4a3057e8e9e000d0688e7584c3cedb07a16fe1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4000}, {&(0x7f0000002680)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002700)="4773403b5e1c2180f25c7c56ec2bd65ea2497072c83c07918e870a9407cc22bc37afcb50b59343e5084cf3bd7b81112dc292bad819d2a6d3d1c0604e74163296eeabebeb1f8608dcf4cc2652d0e5c0df599a653389f46032d278e0adeece0e4c2d09db899e1506e9075d53e3329b97cbc79f3ae52d297d08000cc7f8fed4bb513e190af0d61d351fa410f09324507543b6d49b94834130fed6de14c43411ee86e7af5e8cd78cc9443a99c9801af469caa83c4bbdcb4f8ed64cc4f5dd4aee8120418be2b99e3d7a8de4d38cdf2df66794fecbdcab07b965996ac127d9", 0xdc}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)}, {&(0x7f0000003840)="cb6f6e774d17ce194a", 0x9}, {&(0x7f0000003880)="2e4eb95b8af043309da363b559e59a60ba82e165a43fd02788f4e11d8debb3d553bbd30abe12e12ed89034f8cf6c195fdfd6cfe87a85b9f2a7db2445727c8e3769dd6fb4f01e1f643a5637b89c88edbb6648cfe28e21691d333e66bb0f8fb94e0c81a4be5049b2ac4c3d4e6f856397b29b49a73898e94ef0588adf62bbc0476cf4d578113c1dbdfe35", 0x89}, {&(0x7f0000003940)="bdb50171fd01e4d03266d18f96dc40d82a7597c6134bdfc8f27b0a7f54c4b8fe886f49ee63861a3291e7ff8153ca2311182274379d5ab91908f7eaf387bddfb8f14e125bfc73", 0x46}, {&(0x7f00000039c0)="12439ca0d6d8bf024313aa705666c95b1d82961c082b3a0c76421ff99d3d656c447cec6ea97d72771bece7fa7373656b7bb25f1f4675fc46447d2b91fa084a88613cbd836649a888e83e4e7b86d75f4e6cd1de58619713d78944a49e7f805e", 0x5f}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000084c8a9bb3a2e1936721dd21b23ec137322abea2613ae57e60bf56a87ef7bb552ebf14ef5a6120d6009c469665f60a6d6e74b74d7aa35e68d9300000000040000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32], 0x60, 0x4000}, {&(0x7f0000003b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003c00)="1542d932edce75a9ca62cde46035fe3541b064a230d298892e8f5f917194c1a459b43004e3d28a22a8077307ba8ec24b61f9e3497ec23b2cd488e409f2790507af9f90c6c7828eaf2c691a3f5c7400f963a958f4cb1f6eec761473a13dfe196a2f365e5c3077c54a454fe63ee3c1fbc96cf216b0ecd982c0f42398001c34", 0x7e}, {&(0x7f0000003c80)="94ba3a77daabc2de19db54528d8745566e9aca5f38913991e17d8d99f77baeb8a23b19e0f515a394e4966242b9cc17977762f9923a69a299a93fabce661e31a6c01c16ae04fc18a1d8749ec8ea3b955144bee34b4f5b1bc352130b977a6997294b5bc643d3210654abf639c8e5c1049de48cae925142c7b2bf78a13bf0bcc545e6f96d759d7fbfe53cf4f2183beb559b31fef145680c8a58b68994123c44dbf85884987c9de5e737bb310083ba2b707e06a9c5fd809d6fdf882a94ad8badc9f48b3f0cc18969e3948cc4b169ea4d1ee8d57b194d9ae2b8f9079882a39e0f4ea4379ff494d01a6d93751156c91438f01996d0ff", 0xf3}, {&(0x7f0000003d80)="4401bced6102b789aaef3bc669a2392db7e9063834303f9c7a75aa63c6058272e9331d9f751e7b8bfdeb0e53caa9c2acf8c625847d66c5b06f94afc36305ac6e27765a5e23d0cb1a7e9a2169d1cc272964ecee822b06d326ef691b09d2deaa791e7da65fcddf7b94e26e6b3a7cea1c8e41c8f59f90227db4c138ca971a0663c2d71034813c5dd646dda5506a6304d038147902ae862b11ce63e1d9443b5e5330d2d3664484cad389b2a1baea0b7b642460f4b75842dc92", 0xb7}, {&(0x7f0000003e40)="d47e35ee76ba49759f40eee625d02018df5769bfa0d0fbd36c6943034cee58f949129eec79501582a569427785696361c20768e7c344ad1bc7ecf9b8a2d450ff09d9d0c62d5a48fdf20683eb8ab992a5499bb3d238d45f4c75c3a8efc402eba3d384442cde660240cd102bad35464b1905712a4894329e524e5cfbea1e75eea644031fea17af", 0x86}], 0x4, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x40000}, {&(0x7f0000004040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004240)=[{&(0x7f00000040c0)="ebe89b5140abe633fb6993d27d5e1ba58a37ec396289291ce2314e1b255ab765c6e92f45", 0x24}, {&(0x7f0000004100)="a017596e7dfd76659ef3217220cedf02572a9dad775da72f8a9c5b6d3c3f56a6b258b9b64ebdc657501c4a73b3fe5e7cb04070e929e5a0a03299653e9399b41e54716db575cdf8613cbecff64655c46459071617915bf72aab9e2690437632211e63a91f16e53cbcdd7567b1a1dbf9f31ed9d742e2811f22444837fdedc3ab8e6164d3f328bcc33430a87ce15278c32fbead5aa5ae7b38407701e7254f6c2daa6f096c08b2655be6f7c643c2bdfb81433b396eb6b3e1e9942908cab334a0c64c36555db69e2d897019fda0352923b4ca2b7ff62824d6cc18f121f899a1a07e080f2a1012c3cb9e7ccb8539f769df426fa5531a9240", 0xf5}, {&(0x7f0000004200)="123899a99009ad6e6a23", 0xa}], 0x3, &(0x7f0000004340)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38, 0x4000040}, {&(0x7f0000004380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000004400)="03adf5b8b76f6d9f8f0b44c9e9018fcb2297f28bc6b0d8670e8c3c0c47ced2b57640096b334094699e736523b238d0b1c3dad691ef83b6e9df86d15df7881f809d93141224b77a4055c8616f2c1bfa469242c963b08d5945b11dc6136461ee5944f4d67b4e5e3fea5f75d1fff030eef39ea6bc274bd49631f1b0c6ea1c25cfbf57035ea127dc2f914137fa5f802c9c8de6202ea0cefb9bdceaec656e2cd346adff07ab6ee094a91c58934d062ff2810fcbee202e876f244e20ccac55c45900ca37541cb4e5352396", 0xc8}, {&(0x7f0000004500)="fa0f7a93", 0x4}], 0x2, &(0x7f0000004580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x20, 0x8800}, {&(0x7f00000045c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004640)="30d6985ed71466b158fa25d69cc0b8074461669658d7db7fce9e54790e3efecaa15fa346708f75239cc4979c7429483bffb62824654bb021ee83d2dc18bb99e5a0dfed650f4e89ffe0f2dc28375a738c9ab4996a6d0b91098dd5198c931b139ca5745d79816e8ecc392bdee5a125df0404c65a2e147ff56f0424b466b4d469fb82f63df3ff7ad30642302b48042798c18d2d700a089f26b53703c7cdf95ef1a89411727c857c8730289101dbebd55953d80148674b57089b6d87579089dd1bb44225e0", 0xc3}], 0x1, 0x0, 0x0, 0x4048080}, {&(0x7f0000004780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000004800)="7be980613f40b802f785c215610da4fc0344c16807f47300b237a743180c80c40a2f925f1a8b17c10f9e703ce1a313c4fad528234b33b1b48ebd780d63d37cb4121f6ae32886c2d68637b643e66a87b0f070ea3d3544f3d058f418e937cb77ac8d6629907b8615d48658585c3dc0d3b2457d19afc3c9227f59ad9e9cd73c2377398f6d51d9dbaa2015d29e038d22e736349800242959d69c59753825b373da55450e318e6ea8e9", 0xa7}, {&(0x7f00000048c0)="48669e84862dd559872c76b664b38c138e23d024a83554a14095c283df7c7e9973f3e9f4a584eb5d75230adfc1394eefa4653dd92f9e47af7d97c68a4168103e8648c177d0ba5bfe4d2c0a6debc874d9458ac1e9f0ad6a9d5ae937f7878027808cdb3743f57dc7a98a4f", 0x6a}], 0x2, &(0x7f00000060c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r3, r2, r2, r2, r3, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, 0xffffffffffffffff}}}], 0xe8, 0x20000000}], 0xa, 0x4c000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 07:40:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d700) 07:40:25 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f0000000180)="82fcbe4a92d1aa4a7e191fb8fbbf2a9041c13a556c2d5d2b", 0x18) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) [ 781.124646][T22389] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d800) [ 781.325078][T22390] bond248: (slave bridge499): Enslaving as a backup interface with an up link [ 781.385120][T22392] bond248 (unregistering): (slave bridge499): Releasing backup interface [ 781.488797][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 781.488811][ T29] audit: type=1804 audit(1599032426.047:1285): pid=22450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/584/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 781.772493][T22392] bond248 (unregistering): Released all slaves [ 781.873867][T22428] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000d900) 07:40:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2939000000657464657673696d0000000f0002006e657464657673696d30000008008b0000000000000000000000000000008a", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r6, 0x1, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000040)={0x5, 0x1, 0x7, 0x6, 0x20}) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) write$binfmt_script(r5, 0x0, 0x0) 07:40:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="110000000000390000006061ae66004d4700fe8000001e9e018d00000000000000bbff020000000000000000000000000001000088be"], 0xfdef) 07:40:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025183700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x2, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) [ 782.158551][ T29] audit: type=1804 audit(1599032426.717:1286): pid=22500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/585/cgroup.controllers" dev="sda1" ino=16377 res=1 errno=0 07:40:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000da00) [ 782.611757][ T29] audit: type=1804 audit(1599032427.167:1287): pid=22511 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/586/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 [ 782.805837][T22497] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000db00) [ 782.899657][T22501] bond248: (slave bridge500): Enslaving as a backup interface with an up link [ 782.944020][T22505] bond248 (unregistering): (slave bridge500): Releasing backup interface [ 783.094824][ T29] audit: type=1804 audit(1599032427.657:1288): pid=22564 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/587/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 07:40:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000000000c) r1 = socket$netlink(0x10, 0x3, 0x30) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="af121f77b787a0f8373332646091d875bbae4bc26f41bcd1255da853b72db1d1a748a0043d61caa697c18fd1140718341f7cfde0dae14558d1f4c9aace7a5c9b725d995b30e007f4351af8b067688a036e4dcc8bdd485d86fe27f768dd796cc63326130c7ce523a5e877c020240a9ce5260b090000001f659f5bba93ab957a8ac851a23f0a2e55f2dc1c80f6a5c1c05276f2f973fbf0edd3b9663a5a2ecbb9b5d70d94ac25fab89bd0f9ff69b2aeb717c4c1677427000924567700"/198, @ANYRES32, @ANYRESHEX], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x6, 0x1, 0x0, 0x0, 0x86, @local}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 783.283628][T22505] bond248 (unregistering): Released all slaves [ 783.377184][T22508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000080)=""/86, &(0x7f0000000140)=0x56) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 07:40:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000dc00) [ 783.821292][ T29] audit: type=1804 audit(1599032428.377:1289): pid=22621 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/588/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 07:40:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100253e3700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 784.000972][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 784.056430][T22633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:40:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:40:28 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500005675cf047c9afc41328a0018007f5f14fe01b2a4a290930206040000001301020b0412392e3268e3f760c4750000001900fd3f060c1101020022dc1338d54404139b84af6e", 0x48}, {&(0x7f0000000040)="73005000d612110000ffffa888", 0xd}], 0x2}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000280)=0x5, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x7, 0x2, 0x8, 0xe1c, 0x3}, 0x14) socket$inet6(0xa, 0x4, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x80000000, @dev={0xfe, 0x80, [], 0x3}, 0x20}, 0x1c) [ 784.167524][T22640] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000dd00) [ 784.395774][ T29] audit: type=1804 audit(1599032428.957:1290): pid=22684 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir719597814/syzkaller.BWohEi/553/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 07:40:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000780)=@hopopts={0x2c, 0x1c, [], [@ra={0x5, 0x2, 0x5}, @generic={0x89, 0xa4, "1702fae6f800a06008a84f702d6ad34bad0cc54d0c2fe32b61cc6e50223e4a579cf1cade07ca10333d234ea378351180d2f4d80cbc409a0826427a829fafc67cc05ba1a628a3aaf6f41976e9341a841cf9048d0d98d9b4649416eb7e1ca17c81a3d768a81ba0bea9b554364ae8f0ec666cf258a01515e0a134156ba13047bd29af64b8bd278c722ad5a2350ccbf32580c4f885b524a62037db2d38291d38e3b2971b6b74"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x8a, 0x5d, [0x7f, 0x7, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}]}, 0xf0) sendmmsg(r0, &(0x7f00000002c0), 0x4000139, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01800000000000000a004e200000e13efc020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a000000000000070000000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000002fe8000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000004fe88000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400007fff00000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000020020010000000000000000000000000001ffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000000fe80000000000000000000000000002e08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000002fff0200000000000000000000000000010800"/1168], 0x490) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000640)={0x7fffffff, {{0xa, 0x4e21, 0xf908, @dev={0xfe, 0x80, [], 0x22}, 0x3ff}}, {{0xa, 0x4e22, 0x9, @private2, 0x2}}}, 0x108) [ 784.442639][T22645] bond248: (slave bridge501): Enslaving as a backup interface with an up link [ 784.494235][T22667] bond248 (unregistering): (slave bridge501): Releasing backup interface [ 784.523956][ T29] audit: type=1804 audit(1599032429.017:1291): pid=22695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/589/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 07:40:29 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) shutdown(r1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000300f1ff08000100751732"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r4, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_delneigh={0x70, 0x1d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x40, 0x8a, 0x9}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_DST_MAC={0xa, 0x1, @dev={[], 0x1b}}, @NDA_SRC_VNI={0x8, 0xb, 0x7fffffff}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_DST_MAC={0xa, 0x1, @random="21d688ec343d"}, @NDA_DST_MAC={0xa, 0x1, @dev={[], 0x31}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x5) r5 = socket(0x1000000000000010, 0x80802, 0x0) write(r5, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @multicast2}, {0x306, @remote}, 0x14, {0x2, 0x4e23, @multicast2}, 'macvlan0\x00'}) getpeername$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) 07:40:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000de00) [ 784.992760][T22667] bond248 (unregistering): Released all slaves [ 785.061404][ T29] audit: type=1804 audit(1599032429.617:1292): pid=22710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/590/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 785.104684][T22702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 785.216115][T22640] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100255d3700000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x8001) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x453, 0x200, 0x70bd25, 0x25dfdbfe, "cddef165289c7463373bbbfafd00d22824a8bbd86a967374db400284eb6748af7e0b3d05967cd6c3b2d2", ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004044}, 0x4880) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x4, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x1015) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x1, 'tunl0\x00', {}, 0xfc01}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:40:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000df00) [ 785.477262][T22704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 785.532120][T22761] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 785.614192][T22761] bond248: (slave bridge502): Enslaving as a backup interface with an up link [ 785.690006][T22761] bond248 (unregistering): (slave bridge502): Releasing backup interface 07:40:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x8}, 0x5c) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'wg2', 0x32, 0x39}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x4, "8d8266"}, 0x6) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000cbb8701b"], 0x14}}, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 785.759765][ T29] audit: type=1804 audit(1599032430.317:1293): pid=22808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/591/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 785.906753][T22812] IPVS: ftp: loaded support on port[0] = 21 [ 786.031382][T22761] bond248 (unregistering): Released all slaves 07:40:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e000) [ 786.150629][T22812] virt_wifi0 speed is unknown, defaulting to 1000 [ 786.207763][T22770] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @multicast2, r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r1, 0x0, &(0x7f0000000140), 0x80800) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000440)=""/44, 0x2c}, 0x40002063) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="2800000010000000000000000003c99b102ef800dd57de6f3b85cc4d0a5af75dfee835568c90177e496cc32a3f20f057029f0460b3e252c6ee7141b2310aaa8c49efce8b188968b367663ee92f9924bf8e6c9e1cc867e80b60ff016e1fe9c2aed14fc3abfb1f1d6c4d8f7a92ee1b5b43c9", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x63863e82}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000280)={'wg2\x00', {0x2, 0x4e24, @private=0xa010100}}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000000000000000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="ee20000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 786.352084][ T29] audit: type=1804 audit(1599032430.907:1294): pid=22855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/592/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 786.433108][T22854] bond248: (slave bridge503): Enslaving as a backup interface with an up link [ 786.495626][T22873] bond248 (unregistering): (slave bridge503): Releasing backup interface 07:40:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e100) [ 786.732810][ T12] Bluetooth: hci5: command 0x0405 tx timeout [ 786.863289][T22873] bond248 (unregistering): Released all slaves [ 786.891072][T22903] IPVS: ftp: loaded support on port[0] = 21 07:40:31 executing program 1: r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r5 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='\x00f\x00\x00', @ANYRES16=r4, @ANYBLOB="2939000000657464657673696d0000000f0002006e657464657673696d30000008008b0000000000000000000000000000008a", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r7, r6, 0x0, 0x8000000000004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r5, r6, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) getgid() sendmsg$unix(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000180)="f712351360b450f84f6c79c609ac177b820c1e7d1e5359baec03cd73da3884b0c684f3cd1432c4c89f760f3ce1b41abf2849b63a87e70f9446cc8688f7eebba74ff395d07841c46e3344a2e0f6952e59f11b118003327489927cb71763a443a26d6410090a0b72f6381ff8ce08afa35f3371f4d8c584bc6ed199494be1", 0x7d}, {&(0x7f0000000240)="b0c53ac87433d5b5d9de40dc87d44b4f26eca72e37168837258944cf6d99be6569a2eeec236460a199494f77a19513098b0dfa61964b25d46533d54c1a47537a711d001a53ecea9c8596992caac3d77ba1b10e69c140fe1adcd2500306d00da49ceed48a88bf389c2ac290854070a6449bcf51621758dfcefaaf27010afd8faf3b5048d91fdd907890ac7145de2ee22f79e02e5c12315be19ab15d0892bfe323e122fe871991a59a664829b315993ff4a279cf79246d5fc774ef9de12e934b54b7cfcfcaa74a1428201cb5e8d902fecc44d097ab4c101293cf63241f998de049d8444a6516ee", 0xe6}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001400)="22fd94e6b300c1c6327adab50f44b81437cc6c1774c5f52ea154e3086122a0764db325049c2149bbabfeed78012c892b4fbdf4bd32cf64ab29a7e89c2e8925d9d501bd7ce336a947d3914847d5060eef291e726cd0b07f282b2c01382d89d83d5d370c81f11b329d9c0d7227282e32ebf1236bfbe16d48cd", 0x78}], 0x4, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r7, 0xffffffffffffffff, r0, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xff42, 0x4040}, 0x4004841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0x4, r1}]}, 0x28}}, 0x0) r8 = socket(0x32, 0xa, 0x3) sendmmsg$alg(r8, &(0x7f0000000140), 0xcc, 0x0) [ 786.939428][T22900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:40:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e200) 07:40:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025010a00000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 787.139047][T22903] virt_wifi0 speed is unknown, defaulting to 1000 07:40:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0xfea9) recvmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/27, 0x1b}], 0x5, &(0x7f0000000400)=""/137, 0x89}, 0x2000) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, [], 0x1a}, 0xe0}, 0x1c) sendfile(r2, r1, 0x0, 0x10000000d) 07:40:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000104000200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00128008000100736974001400028008000200ac1414000600080000000000080004000100010008000a00", @ANYRES32=0x0, @ANYBLOB="e5d1318a9ca62b7c5444a7593805bf94a6f9dfb60010b5e838708aacaaadfada950b88dc24d9747d83f911a14feadaa54c93e567f1af6e6036219d1b87a4b8342ba4e7e678d0cc8a05248639c6b69764c46ba279a32d90539cbac5c3224357f7459dcf21d3dbbeae47ac1600e2ed90a45038185a1a24cc725240"], 0x50}}, 0x0) [ 787.277146][ T244] tipc: TX() has been purged, node left! [ 787.308661][ T29] audit: type=1804 audit(1599032431.867:1295): pid=23004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/594/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 [ 787.373015][T23010] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 787.429059][ T29] audit: type=1804 audit(1599032431.967:1296): pid=23015 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/540/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 07:40:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xe, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x800}, 0x26004802) [ 787.624187][T23016] bond248: (slave bridge504): Enslaving as a backup interface with an up link [ 787.677486][T23020] bond248 (unregistering): (slave bridge504): Releasing backup interface 07:40:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e300) 07:40:32 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000040)=0x54) [ 787.917522][T23066] IPVS: ftp: loaded support on port[0] = 21 [ 787.992128][ T29] audit: type=1804 audit(1599032432.547:1297): pid=23067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/595/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 788.098586][T23020] bond248 (unregistering): Released all slaves [ 788.219895][T23016] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 788.339877][T23066] virt_wifi0 speed is unknown, defaulting to 1000 [ 788.548992][T23066] IPVS: ftp: loaded support on port[0] = 21 [ 788.608020][T23066] virt_wifi0 speed is unknown, defaulting to 1000 07:40:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000180)={{r2}, 0x0, 0x1e, @unused=[0x5, 0x1, 0x3, 0x34], @devid}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x11, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x3c}}, 0x40004050) 07:40:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e400) 07:40:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010030100016c0900fcff0000040e05a5", 0x58}], 0x1) 07:40:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025015d00000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 791.559921][T23177] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:36 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x4}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1c, 0x3, &(0x7f0000000240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000280)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0bfe78d3d4c6150f396da3314eb5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2939000000657464657673696d0000000f0002006e657464657673696d30000008008b0000000000000000000000000000008a", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r6, r5, 0x0, 0x8000000000004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r5, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000007f000000000000000600000018190000", @ANYRES32=r2, @ANYBLOB="3c0000420a00000018180000", @ANYRES32=r2, @ANYBLOB="0000000000000000fef2000007000000180000000700000000000000000000b0d728f0fffcffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x200, 0xd0, &(0x7f0000000440)=""/208, 0x40f00, 0x9, [], 0x0, 0x20, r5, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x3, 0x7fff}, 0x10, 0x0, r7}, 0x78) [ 791.687802][T23182] bond248: (slave bridge505): Enslaving as a backup interface with an up link [ 791.711635][ T29] audit: type=1804 audit(1599032436.267:1298): pid=23218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/596/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 791.862408][T23177] bond248 (unregistering): (slave bridge505): Releasing backup interface 07:40:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="d0a12a01c49b84822239154303a44f63558d8e03d028a4bbb476e03824979985bdc2296be50bbb50282129a157806d79ac4fcd38a309562b429e85543efa30", 0x3f}, {&(0x7f0000000240)="85059f08a3ab5a637ef2fcd3287b85fc17b48417f07287c60e02bd0aa7cf37bd0bfe72c8270e23af5655cbdef7d4e71715b79d6764b62021625722f269f43f9a1180899e807415651be47f637b486f27ec462e0ced4b2318d12d93fa34f6f819b4", 0x61}, {&(0x7f00000002c0)="6ae9ea49c3b71dd7c21c042ead05230ad3b55baeb0c810e90f32c2eb438e3cf7aae6d691cc3f45ef27db7e2c3fdecf2e5ad4f76e9652795181c7c774da6168e85197a963523307ccbd2eef7bdb86f7d86a40c24c64b2752b4d29d816b8ddbdf128dac9dc595945325b91c5c73da55e08e26af90c2c4bae628ea52ba850cf0fc86a99d60433f9ea23f3b65654d6b44eeba9d5644548a56ca9151f3f41133baff1ee07b9f7c5e8cb118d82dfc33ea9e85d8d05a8d733ccd336dc25857fd919ef55edc94f061f66c356f3aea5f4183a421f0c", 0xd1}, {&(0x7f00000003c0)="7cfe6350c120abc34cd7044cab5197adcfc73dcfa0e139f6322020ad7162d9d678931baf5aaec01b6bc6fb8173332b4616a736d9f6c7b9f66a7d19a63151af48039e1a93bbfdeda13e37e203cc4f5b0bc356d281d46661cca84176d63250adf0aa455f9762df03593a6b661cc3ebc2bdff1c4468", 0x74}, {&(0x7f0000000440)="18d04ad71c96a2f39a22d4e806e99f1791967b9ba5433d28e53be2b006d76a114d9b097fa82cd61d74affe7291811df290a99561f2187e45b1ca08148d3f6393e767d5f92fbbde7cfa0007b9f2877135c11bad93beeaaadcbf27a7c1a21fa17a9e0fda607f366572c99520579f515d240ac402446ce0af3ebe1a3670229a32b31483aa429310a23f303f44fe5cdbb070ce5ffe46fe6f34c93716d47ed1ca6d6f79fcefe05b77eef01d020dc26e4b7542befbd128c358ccc657c87467432bdfaad8", 0xc1}, {&(0x7f0000000540)="ecf3faf93a49d4b1dea82d84c4f5dc4641b45401069dce7d1267a3150259dc9e47b9ec70be62e6493b751400724c32dff64b48b6c9d429a9dadfd207efa068785468e70494ea9317795e5596764bcb1b410680ecb65240acab22edcdc497b9866f5b9fecd8ae4bccc038995554dbd8012a8f0267eab3f4ee9a6dff4a326f78c3bbc710eddc03435a955406d76d49cfbd4ac66542ce2d08d3772076ed10471286fdfeadf741729cd20ecbf8b7327ccdcc89590042cb23db53b230162461b0230b26d7dabc6b09c999ffc7c5da03e39273ac2ce7a773292967f11332054783", 0xde}, {&(0x7f0000000640)="d4d47a12dd827d94f00aaf83b4abe1cf6231e5b505cd1f50f02b388168e32fb5c901a3fa249bab4368b15f84f2bf45cbb5430119a10c2aa58c4e229dfe38fb53e9c2c97d04011f3e32136661da5e284a99519a3f86a0b5e91caf0a33926ddf5159241e2e5cf0d90488a0ee73b59beaec87942d1a3b216c0d40174b00f465714d93b6c9ef556dd468a9108e0cfc79bd52beb7aaaf2f80cca0269966fd9552af347a3cf21130128c51797059859ed69587a78acdedf948abb712161fa8b721ec53ecb9ff65a3160ebd173708848ce3b8c93b2793322323a2aa78dc46533bfb75f85f7774f1ca956dd4d023a7cdf71116", 0xef}, {&(0x7f0000000740)="8b86741d56d8635aad41d8ddc12f8ba9e1a77be31cee6348f320f5166c", 0x1d}, {&(0x7f0000000780)="94a2b99e259d356ba8bf5e152a1734d5fb7bd65d6d71ad1435fd84ad500f6508bfbe3095be46751bc5e22f3453566df574405d9f690656fd1c819b44376b88b2fadf5283d2eaaba28d6250bab9a039896f9c4d480e015f5f6e0504bb30381d207ce7a3c33304e33278be639388dee781ce76eeedff143bc5dc41dd3aa626a194bc66bed27f3c0bbe13e7e89bc1773f2e760d9578bb42b4270cb32f7549fa7c3005c73bdaed6c248160f9ee162afd6fab1e", 0xb1}, {&(0x7f0000000840)="c20a0ca98c6a74d362f2d4d87051a54f", 0x10}], 0xa, &(0x7f0000000940)=[{0x90, 0x1, 0x87, "f0e4db43ce31222b3c2505fac66227e5b930dad41b561646bbcddd3492f98ec9ceb3abdf3bc7f71195278894ce770eb04e5b3c6550593b337b146b8291f2073e8cadf096ed9d248c2a9e831776a01e57290f9d87d275e5218fd327e92174c987c995860b501fa975a2e17f3d15689e6ac5917c385b459f3085340b4002c5"}, {0xa0, 0x10f, 0xc8, "1bd11f3f756a6d98fe2c98e1d6e93471fa39c11aa0834e079cb542b66a7da95f3d22e89a6f8318928c625d63da79d98d8fe96b12c068de10b250711fed4511e65ac9d96efcad4b62d8f1bf5a9e200fc6a21e9b5f62b714de750c12f41695d802b2919dc55ad9ec1d022258a981cfe620f6a89dc8c5be7ab76a4138f1f919fb6510cc13d72fc14b910a"}], 0x130}, 0x48021) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x24, 0x6a, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) 07:40:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e500) 07:40:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000007f40)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r4, 0x25}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="000000000000000028cdc4cdebea4ddb1335cf361c0000ce220012000c00010076657468"], 0x48}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000010011000d44003b860000000000000000000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 792.230387][T23177] bond248 (unregistering): Released all slaves [ 792.303683][ T29] audit: type=1804 audit(1599032436.867:1299): pid=23239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/597/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 [ 792.358748][T23220] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:37 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000500)={0x5, [0x401, 0x81, 0xffff, 0x9, 0x0]}, &(0x7f0000000540)=0xe) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x1, 0xc, 0x6, 0x5}, &(0x7f0000000340)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xac4}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff62000007003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:40:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x2c, 0xa, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00000000000000000300f1ff08000100753332"], 0x44}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IE={0x86, 0x2a, "6fc45a5b7a0ba75f6ad53a604b2e392295d0f5685b5263db9de652030d1551f7b8abbf68e33ccaea89a36f0a08f173a2675c1643a9361de421231e8f3f370c7ec5a1971cb2fac76735b7ac5527c4c215280728d475150f383406c81f56e4b0eee9d52d74c6b1374d6f513c7b50bc023d76a542cd81891e5fc1154a6e0972556d5769"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000a8f4af0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38fa00ed42613783172ad3e7620e6c4e000000002000"/33, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f0000001100)={0x17f4, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x33, 0x5, "8932bece3a5401ce7d95b6168976d23c10b42832bcb79f2aa1613d302512b4b16df25bbb6f478f54fe124f5f8ab903"}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x1354, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$)),\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(}.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "e0cedc142fbee8a89811ec46b0367dff25f9370742696039492eb6ec1235ab4963c3a2f04e8a0ab24a1ece995f4351a981ed0434a5f4213ca8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'J]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x553d36bb}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '$#%T[!%}\\#&-(\'{%+}^^%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff4b55}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xc9, 0x4, "ad24c749770ea4a70c2151c4598d26ed37ec2dfe0bc2f2409032dc011b57b6ae57c1eb60ee4fc4e3784350a415a90eeabafe4196dd1a0761534fe9496549fc89ba7980a62a3f676ca4ece3c225b381be89cdd6402bcc7fd5f59c953fe4ccc08b20da5ee5462bf11930d2c5ebd1b83f7c82aebeb393dbd16d82ce4b2cbf5ad6d282c351af3fad1ef783e049d73a439d46f717a57f3af66748b684930666204543e94c0b3b5634a4c4860f0c90142a12a86ade046ebfdb31802d5f8a4e0ca84f554db392fc42"}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "727b1dbb9ad1415e1e9935ea5a393a8876631bd9"}]}, @ETHTOOL_A_WOL_SOPASS={0x47, 0x3, "0ba55337447b8b921da527877d2cf2589c35b20606b2dfba3f8c102d956dc781635ae73d488a378771238c47609814916deda6a4fd7c7a594a3e09e7a1159e77a7caad"}, @ETHTOOL_A_WOL_MODES={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff07a4}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "de238e61fce57a2f1401d7f24eb809aec11489cb3d02e5047c1be9a84484f5b2574d4bd2c8f4b7a9bf7257e815f8896d8540ae8d40ec0b180161b3b8910b97d745aa037ce4b07c3493a398203cd04a00c92d41e7a0a59db0979535437fd2e7fb4536b8d04da86a027f57f82b9867037b2a6af7e5a8cc46a3dac77ac1ccddd3a4ee89e349f0099832279837da41c4b5e51c10"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "47a7e79fdc1720d96e7da6d9ac7ca7f4581f80fa43b9d47de18ccde33f26ba4fbcc4ec66a7d493d0947ce818552c8e944797009a131cd238f3fee0a1f8590a19485247ac017e8b4807af311387a1ff247ef15f6a8687317423b484a02b78818edb2781b82e8b6894a82af5cb942713a7cf62a72b39c8d718162ef644bad17db6d2895d00d9e1aaf125cddf42366b722c9e854b5695bb3547db9c74723fcca6e12f70a19ddd04d0845b5106c962a0f552d58640e197eb11cf837cecfd693859"}]}, @ETHTOOL_A_WOL_MODES={0x22c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xe4}-\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "fd6c3fcef158efda5fd0be99ed7317dfcc72ddbeb0c4bd6aa86dec6b3333dd1289330b7c704c286bfb632707d26d2a191b57be036e32d37564e83cc6111b26d15b6e3bb573e61b180315116d0c0c8e5d86239ce0ebb2e9be14ee40d854763cd2f6fdacd481c6786404168f291cb2e7d82958"}, @ETHTOOL_A_BITSET_MASK={0x103, 0x5, "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"}]}]}, 0x17f4}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x458, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x420, 0x2, [@TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa5f}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x2, 0x3ff, 0x8001, 0x6, 0x3f, 0x6, 0x5, 0x9, 0x4b, 0x10000, 0x1, 0x0, 0x3da, 0x6, 0xfffffeff, 0x4d, 0x1, 0x2, 0x2, 0xa35, 0x6, 0x17, 0x6, 0x8000, 0x5, 0x0, 0x7, 0x6, 0x4, 0xfff, 0x3f, 0x3, 0x3, 0x26, 0xffffffff, 0xc3c, 0x8, 0x42f, 0x7, 0x1f, 0x6, 0x7, 0x6, 0x6d, 0x6, 0x5df0, 0xc4, 0x0, 0x7, 0x6, 0x4, 0x6, 0x0, 0x8, 0x8, 0x7ff, 0x1, 0x10001, 0x6, 0x401, 0x7ac, 0x5, 0x401, 0xaf2e, 0x80000001, 0x0, 0x8, 0xffffffff, 0x7fffffff, 0x50000000, 0x8, 0x16d0, 0x2, 0x3, 0x7, 0x800, 0x7, 0x93, 0xfff, 0x8000, 0xff, 0x7fff, 0x480000, 0x3, 0x80000000, 0x2, 0x34f, 0x7f, 0x1, 0x101, 0x6, 0x1, 0x10000, 0xffffff24, 0x1, 0x21, 0x200, 0x1, 0x80, 0x7, 0x6, 0xffff8001, 0x1908, 0x9, 0x1, 0xfffffffa, 0x0, 0x6, 0x4, 0xfffffbff, 0x0, 0xfee4, 0x4, 0x0, 0x6, 0x7fff, 0x95, 0x80000000, 0xf236, 0x3, 0x2, 0x8, 0x8, 0x4, 0x5, 0x80000001, 0x3a6, 0x7ff, 0x4, 0x1f, 0x10000, 0xfffffffc, 0x5, 0x7fffffff, 0x80000001, 0x1000, 0x7, 0xfffffffc, 0x7f, 0x5, 0x3, 0x1, 0x2, 0x7fff, 0x6, 0x1, 0xfc04, 0x9, 0xc9d, 0x0, 0xff, 0x81, 0x7, 0xffffff01, 0x0, 0x8000, 0x7fff, 0x6, 0x6, 0x78c, 0x0, 0x7, 0xffff, 0x956d, 0xbc83, 0x2a8, 0x1000, 0x6d, 0x8a, 0xffff, 0x1, 0x7ff, 0x2, 0x7, 0x8, 0x81, 0x4, 0x6, 0x8, 0x5759, 0x0, 0x3, 0x5, 0x7, 0x0, 0x0, 0x5bd9, 0x8d, 0x7, 0xfd31, 0x40, 0xfffffe00, 0x4, 0x5, 0x3, 0x2, 0xcfe2, 0x5, 0xffffffff, 0x1, 0x49, 0x9, 0x43, 0xfffffffc, 0x6, 0x5, 0x4, 0x9, 0x400, 0x8, 0x7ff, 0xa3, 0x2, 0x100, 0x4, 0x1f, 0xfffffffa, 0xadc2, 0x2, 0x6e5, 0x1, 0xfe0b, 0x2, 0x13, 0x3, 0x2, 0x4, 0xfffffffa, 0x5, 0x8000, 0x2, 0x44, 0xb05, 0x7ff, 0xd5, 0xfffff000, 0x2e, 0x7, 0x10001, 0x3ff, 0x9, 0xb564, 0x100, 0x7, 0x5, 0x5, 0x50, 0xffffffff, 0x1000, 0x0, 0xffffff2d, 0x7, 0x7fff, 0x77, 0x6]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x458}}, 0x0) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 792.609583][T23279] bond248: (slave bridge506): Enslaving as a backup interface with an up link [ 792.671688][T23312] bond248 (unregistering): (slave bridge506): Releasing backup interface [ 792.682843][ T448] tipc: TX() has been purged, node left! [ 793.013099][T23312] bond248 (unregistering): Released all slaves [ 793.082210][T23323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:40:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e600) 07:40:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0xb732}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @local}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="bffb67f3bd103c", 0x7}, {&(0x7f0000000340)="8e53e3432888ca", 0x140}], 0x2) [ 793.158699][T23326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.229268][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.305702][T23324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.334143][ T29] audit: type=1804 audit(1599032437.897:1300): pid=23373 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/598/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 07:40:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002501370000000000000100000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 793.376547][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.401804][T23330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:40:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010003904000000000000000020010100251280ccb9bb96269b306b7d98b59e17cb0e4dcb3a1e6fe358c9f0c5482abe184258ab9b13494d4b1bef98f579d1063c897ddf21283b70a9f496c7367a979436440fb81c7deb268fbb08d8d5cd6624c46d9c0ddef0139c905c55b8cc4686c68ca5a01d91befa74c67e7b00e52b0980f7b9b7cbb7552e28b2b0548186d3a005ef24afc97c791de04cafb2a4802281e3edd774113a25a100d4", @ANYRES32=r4, @ANYBLOB="83080000000000002800128008000100736974001c00028008000100", @ANYRES32=r3, @ANYBLOB="06000f000200000006001000c9e40000"], 0x48}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000940)={0x1, 0x9, @start={0x0, 0x1, "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", "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"}, [0xfffffffffffffff7, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffff7, 0x4d, 0x0, 0x0, 0x0, 0x4, 0x4, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x80000001, 0x6, 0x867e, 0x0, 0x5, 0x1, 0x86f, 0x5, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1f, 0x6, 0x8, 0x80000001, 0x5, 0x3, 0x0, 0xab48, 0x9, 0x4, 0x8, 0x2, 0x9, 0x6, 0x2, 0x83, 0x0, 0x2c, 0x0, 0x0, 0xfffffffffffffeff, 0x1, 0x0, 0x5, 0x1, 0x0, 0xc0, 0x0, 0x3, 0x2, 0x80000000]}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, [], 0x16}, 0x4e20, 0x66, 0x4e22, 0x2, 0x2, 0x20, 0xc0, 0x6c, r4, r6}, {0x8, 0x7ff, 0x5, 0xa02b, 0x2, 0x2}, {0x800, 0x6, 0x3, 0x101}, 0x81, 0x6e6bb3, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x3503, 0x1, 0x0, 0x3, 0x5, 0x5, 0x2}}, 0xe8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 07:40:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/160, &(0x7f0000000100)=0xa0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400, 0x102}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000840)={0x2, 0x5, 0x7ff, 0x80000000}, &(0x7f0000000880)=0x10) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000180)=0x6, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f00000001c0), &(0x7f0000000300)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000280), 0x400, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f00000007c0)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0d0000000000000000002020000000000200000000000000000000000081bc0000000000"]}) r3 = socket(0x10, 0x3, 0x0) socketpair(0x9, 0xa, 0x1, &(0x7f00000008c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="25010000000800060000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) write(r3, &(0x7f0000000000)="240000001a005f3814f9f4070009030180002000000000000088fe5ba50899cb421bd25e", 0x24) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) [ 793.571907][T23395] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 793.659819][T23397] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 07:40:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e700) [ 793.757557][T23395] bond248: (slave bridge507): Enslaving as a backup interface with an up link [ 793.802703][T23432] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.827213][T23410] bond248 (unregistering): (slave bridge507): Releasing backup interface 07:40:38 executing program 3: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r0, 0x25}, 0x14) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) accept(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000140)=0x5, 0x4) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[], 0x2343a726) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@default, @remote, @null, @netrom, @bcast, @bcast, @rose, @bcast]}, &(0x7f0000000100)=0x48) sendfile(r4, r2, 0x0, 0x7fff) [ 793.916258][ T29] audit: type=1804 audit(1599032438.477:1301): pid=23444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/599/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 [ 794.274931][T23410] bond248 (unregistering): Released all slaves [ 794.350740][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:40:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e800) [ 794.395380][T23438] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 794.548744][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 794.600333][T23410] bond248: (slave bridge508): Enslaving as a backup interface with an up link [ 794.630703][T23500] bond248 (unregistering): (slave bridge508): Releasing backup interface [ 794.666902][ T29] audit: type=1804 audit(1599032439.228:1302): pid=23526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/600/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 07:40:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000140)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0xc) 07:40:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e900) 07:40:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x47}, {0x2006, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x9}]}, 0x10) r2 = gettid() r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast2, 0x4e24, 0x1, 0x4e22, 0x4e6, 0x2, 0x80, 0x20, 0x87, 0x0, r4}, {0x5, 0x6, 0xa99, 0x3, 0xff, 0x0, 0x7, 0x5}, {0x6, 0x7, 0x5, 0xe5}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x4, 0x2, 0x20, 0x10000, 0x7, 0x5}}, 0xe8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) r8 = accept4$alg(r5, 0x0, 0x0, 0x80000) r9 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r11, @ANYRES16=r8, @ANYRESHEX, @ANYRES32=r10, @ANYRESDEC=r6, @ANYRES32], 0x28}}, 0x0) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000040)="ef1d5f2f2450ad340cac96f2", 0xc}, {&(0x7f00000001c0)="0db57abb72106c624b28aa64db9158d92249c73562c5d06797bc71e569a7250df19ae6c86a7dbefb348995cdac2f283821984da6342ba9e850047e78538448779346aaaf5d1a8db46547b201eebe16eab80aeea50e5a80b563832ab9f0db3edac1ce7e5f44168f9c332bfeeb99b497762f72870a645ec76a49e2c75927234fd89c2fc1086e1a6423041875349ddc662fddfdcd1b880acc1083f8dcf6d6b62eebaedb0c51e5adc5a3cdf14c2eaac60124ba2a909df6291721d91d0e7cfdd3276042d4f5e64d70203d9c96c04bc489740c9fa5d4cc77ad55", 0xd7}, {&(0x7f00000002c0)="fabc4caeb88433dcf37106a63cdf85c989db9f765070c52b501baa3ad8b9369f950bb2d1db37b3a6811e27ae3db1131f620c02f295bcae49801c5db0aa5c66dae51f2edcd839067876e4a95f34b963cf067589de327d2ff949cf874c737ca94694b983863ba4918892595faab647d41f94c461e98b75cf", 0x77}], 0x3, 0x0, 0x0, 0x4000004}, {&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)="40eba4a82aaa4e1b1c57fe559555bf11a510f8e1e50e327166f2557e5d6bb3925d8e12efcd27a14725056525244771c212e1f7eedcc79a47df0fbf4d0bd06a735d857c44056bd5e2acedf3baa5dfe11a2d187ac9117b820d3f1958f6ac30829bfc58b50b741ef2809adae1139aaf3edc88a667dd6e2ed4cac6a68a77e17eb8594b0a5d7a4531ea810831c88b6b7d6f99175faaa41e0b00f79f91df77d65717ec4355", 0xa2}, {&(0x7f0000000940)="7e584933d05c4c75df757f35b36cdee042bf8f600d69e34d4061763dbd2fcba99b591080f82cae45601312ca3475054b72c4a083bce794d0c59eb07b47", 0x3d}], 0x2, &(0x7f0000000540), 0x0, 0x24000084}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)="a7a6f517d688854c47953c58288f87af31858b7094280d1651e094234284e74ac7a845871a3adb59b7f6d4f6b0f0fb09f1d4bd9e2a412ffb8b4d1727120687adcbebe693eb221afc4393e906fbaba94e1f54faa34a81647ee018f2a63f9379905d8a01d476da4a7789fc2050d453d27398877613e23957a49ef35748378ba50c65a435f8f738a1da499f676eb834e745f9e669cb2bdfb024d62315ba154471bed1893a411435181978aeeef4d42a3e4c8629b3448aef7986d0661c973a69e98cd45840ab58f014abce84", 0xca}, {&(0x7f0000000700)="ef19fa709a223db04196ef05c1b68ae5d764838f5fc520f6ad9c5aba5c7da0829779e72eed15cd0f70bb616b09b68db7796ea570e1ab669a85d83abbb4d7013b46698bd11f1ddac035bc3fb0169cb2e106c204df2ace5af8e09c89c098754ea6c8bf8cdb503b9fe6c5f0232ed78b98589a7b71d97235da0f1dd0f93233db1721038ae5dcac5fa849d0d2f3c7b552d2689deb94f3c77fa5f265", 0x99}, {&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000840)="912c34f97feec32d337dd121ee4c2e393132d4b76fdacfa68c2b942658a38cbdb87f960337af22114ec2ee2529e5e5a39e021762b18327bb9cc9b834d0b6b46c5e5cfcc5f3d1f67ae476411f9864597155683bec574307208b38fc1d961edb77af8d1271415b149c23b00a07ed71aaeb134045a973ce318bd1c33630ce1c1989040d7a62ef4d1d1a7e3714cdff7bf09c1259f1cc4d9a0033cec58a4ae241f833a1fe097cff70a334432780dfe525eaab20eb2ba541a86872", 0xb8}], 0x4, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r11}}}], 0xb0, 0x4040000}], 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000005000000ff0006"], 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 794.950245][ T29] audit: type=1804 audit(1599032439.508:1303): pid=23535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/532/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 795.087630][ T29] audit: type=1804 audit(1599032439.528:1304): pid=23540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/601/cgroup.controllers" dev="sda1" ino=16367 res=1 errno=0 [ 795.126211][T23500] bond248 (unregistering): Released all slaves 07:40:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}}) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x25}, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 795.283891][ T29] audit: type=1804 audit(1599032439.728:1305): pid=23539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/532/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 795.396265][ T29] audit: type=1804 audit(1599032439.728:1306): pid=23535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir377769881/syzkaller.UIziF3/532/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 07:40:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ea00) 07:40:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002501370000000000000400000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000010000400000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r6, &(0x7f0000000100), 0x492492492492711, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f00000004c0)={0x17c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x17c}}, 0x400c004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffffff7c) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r9, @ANYBLOB="000000f000000000a73254bf6d6291839de9921a591356a5f4878c69e83ecac221d1e1db908eea81cd804bf859ce394d85b436c343f081617f7fa6b4040b0989fe4550ad44737db510e7d38d6c7de7f4ad578c56c0585c4abea8191a9dcc6a79fb9bf3be7fe4e9408248cfc1aac533acc3febd5b8829171c6f005c65d137116ed73c82f3793337c5a495e32bdcfc4d2a339ddcd137b5b1b3948c11f46b8dc7a128abaaebc6d037332da1338351a701ebe97624630d98c1ff47de07e5bda6e55a8f8e45aaa306a908"], 0x20}}, 0x0) r10 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="8d32605449514d83a173c12f688a8913727150bea4a13b82fd9be3b82ac6dab902f19aadce96a9d94d6d70af2af6d7a4b1801b4952fb2ed29e267e5e19cbcd2656dd056d917eed67b8", 0x49}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000000640)="a758e8d9701c95fd1a78fd8baabc216e7239b89758410e6991dac983a142508f7a3d500cedd90f101e0a30872137e7577ae5a657566bfbe0220d3172468fd73ade649a7ec0df667974466b6d1322e66358aa763488600bf093fc7ed8be9246b23a7c147aab29b59877577a20d10c08e2f70969d0e4f8efc0d41ba62b509d17150e6262f70be3404be4bbf162f050c03846430e85ab934c5d06de1264e299615a6539a01bcfec3cf8ef69a4e7f055f9", 0xaf}], 0x3, &(0x7f0000000700)=[@assoc={0x18}], 0x18, 0x40000}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)="1669f50f3214fb7e5361b0a8fab114a01da1a6603a1490b48e62409b162b10172e84", 0x22}, {&(0x7f0000000780)="39940d4617500e2812677389395557fed7f41d66b31daf3e6f0710ecb76a977aebfd3a1f6a321d6f71294c8014988797b6c01d11b3c151df4a95a6b3c54f3598134b5f821f952f34a12e6ae5222828c6e7876ed6c1206a5372676548b480bc021c93f7511be004459d5941c9c36bc0e81f8b6cbfa630129a052cb688b9ee60ade9f5fe31af9a13ba26caf18f5cc50e679c28f72bcade9c19e1d1df8ab795c076ab68c118407ba3aced253181d349c68c47282e714fd3b8293ee59f70cdda9e9531491cd3e4ff98e487f2b1e17e97c817a9f771e1c14b1c0f21636d6433e4d713672797d6067d08c2433e68f00bfd45c0f18ff46b88ddb810", 0xf8}, {&(0x7f0000000880)="fdea7d1c00feabe13640387709cbe1bd5175fba34fa9f2ac814fe32ee575a2491149c4e9271a0074e98a3f33107a87f202ffd90a7048a0697afb641a9b3ac304027aa9b0256aaba16e1d1fbde6530d66dabd8ada2baac95c00602210ebcdf7f61add05a487a64f9784958d2dc1ddc4572ccfcaa2f27495", 0x77}, {&(0x7f0000000900)="e515b3edf5421a3ae001bd039788f7696251800d3fe54de0fbfdc93fc4be81d2f1eaa235641bfe7d36d51f85a6587e4c01c6f494c67837e12290a099b89a335fd053de8b51bfaf41b3b03f018e939b8572ba1b82e85cd3f92de68e282dc7f49277454b1e03062c8da84d618e007192b2ce54fe062acd3e492cd397e782cdc326a4941ed1a5a05ffbef3d91a4ac80565cd99ef0571d93fda87dca7a06ddbe4619d99ad16f0582d82162379b3e12969472a4dcf8d2f68872f539cf93dbf1937e58acaf718c9c9e5bf70e0c1e6bc6f3ca2aa45eccafdae0a6a9", 0xd8}, {&(0x7f0000000a00)="b61f3a04afb836e9f66a3bea613c8314c0b71074516f4b225240812f6f34047c7bc4b64ba244cc9cc8edb10f9766458df0aeb4be58f55487dc3a7657b3c177b77e21a93cb8ba429c16b4f2aa9d169310149e46dd1601268cd19f493e27a5fcbca6f47c1a9fb754385bf90e2db79d24ad33900ab6136315f037cc1b831b029ccfcb6e4d3acb970cbf47387015c259dacf84275e778fa6316c16109363f29b0fe989862c3c714fe835d0e6b484d309a27f00a89b0d3ec9518244022674a9c27c85bad31ecf2a", 0xc5}], 0x5, 0x0, 0x0, 0x4004087}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, 0x0) [ 795.619163][ T29] audit: type=1804 audit(1599032440.178:1307): pid=23583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/602/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 795.668280][T23592] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/99, 0x63}], 0x1, &(0x7f00000015c0)=""/210, 0xd2}, 0x96}, {{&(0x7f00000016c0)=@ipx, 0x80, &(0x7f0000002880)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/69, 0x45}, {&(0x7f00000027c0)=""/148, 0x94}], 0x3, &(0x7f00000028c0)=""/144, 0x90}, 0x9}, {{&(0x7f0000002980)=@qipcrtr, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002a00)=""/88, 0x58}, {&(0x7f0000002a80)=""/214, 0xd6}, {&(0x7f0000002b80)=""/164, 0xa4}, {&(0x7f0000002c40)=""/198, 0xc6}, {&(0x7f0000002d40)=""/211, 0xd3}, {&(0x7f0000002e40)=""/48, 0x30}, {&(0x7f0000002e80)=""/46, 0x2e}], 0x7, &(0x7f0000002f40)=""/153, 0x99}, 0x3e80beb3}, {{&(0x7f0000003000), 0x80, &(0x7f00000043c0)=[{&(0x7f0000003080)=""/254, 0xfe}, {&(0x7f0000003180)=""/183, 0xb7}, {&(0x7f0000003240)=""/75, 0x4b}, {&(0x7f00000032c0)=""/227, 0xe3}, {&(0x7f00000033c0)=""/4096, 0x1000}], 0x5, &(0x7f0000004440)=""/66, 0x42}, 0x2}, {{&(0x7f00000044c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004540)=""/178, 0xb2}, {&(0x7f0000004600)=""/238, 0xee}, {&(0x7f0000004700)=""/90, 0x5a}, {&(0x7f0000004780)=""/12, 0xc}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/61, 0x3d}, {&(0x7f0000005800)=""/83, 0x53}], 0x7}, 0x101}], 0x5, 0x40010001, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000005a40)={'veth1\x00', 0x3, 0x2}) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x101, 0x7d, 0x5, 0xff, 0x20, @multicast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="fe6060c1c4e78e7adfc95622a816241f5a3b72dffdaa48cce8559514411c3c2707d3838e946c", 0x26}, {&(0x7f0000000180)="73f28a1517e6280a74ca91ca35180d20efaa3d0fd4c86176a8ea3c6175143da06446eef6cbae58c45ee85ea397c41bf81dfcd77fae4239aae6a24a884339625503479d280a8d7aa958a63c9eea58883c374e2cc25381fff2047982c20c3a92ccd11c9ac10f902873a40e2dd54e87a8a85a4afdc22c92bd0e44a795205743a479b4963905043ec3803cf8f6", 0x8b}], 0x2, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0xb, 0x28}}, @dontfrag={{0x14}}, @rthdr={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x0, 0x4}}}, @dstopts_2292={{0x1140, 0x29, 0x4, {0x73, 0x224, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xff, 0xe5, "ec329fcd989c2add026567a2aff4c9032dd9dfc4b4bb29c92a54e011f39b2c7ae4280bf00f02098616717f7c42410d007f220f7f56037098618e1f5a4479191b995642d121d7d55b091d2d1ecbc09402c93e64d22a004ae6eee1edf26cc1be0940e1bdc9e76071ea31f0c550d142d661eb11b2972a225a326c406fc57f54ce0bd28b1a2c9d1db7de42e4ebe9261606bc9bf3655d7cca7f806adc12de48e2ac1f9d10c26f1147e8271f6d4e3f9fbad98a7caf7da3cc9e265678b6c610b05668247bb53307a64d104c4933a64ee0eb8dda01b180ea82b7201e5fa74ac51085189415c9187c9a"}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x6, [0x5, 0x4]}}, @generic={0x4, 0x1000, "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"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x11a0}}], 0x1, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0xc0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000030007b01000000000000000000000000640001006000010008000100627066003800028006000e32d34a0563f01653b3f8ac123f03000200000018000200000000000000000000000000000000000000000014000400000000000000000006000000000000000f040006000c000700000000000000"], 0x78}}, 0x0) [ 795.952448][T23593] bond248: (slave bridge509): Enslaving as a backup interface with an up link 07:40:40 executing program 1: unshare(0x40000000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32=r2, @ANYBLOB="29daca0b886d821b8bf5e9a8f963857a194a65d8d83319ae3bd6b9eeaa7b2e18973a416ad9b0ffaa84940ed5b42ca84dc2e27de545b0a077e987bd5b8b04ddc3bc7980f0a7dfe84aaa6ba261f6cea99635bd0097c3e88b98ce11477a5db0d55d861708b127691612258c7118d080f70842c2484115814ecdbd52337da80d75cb9e3737e46623e9419c38f762126d13f5bae28dcb2a8e81605ffc0beaf4121bb49f814c5edffd38288779bc8d0274e0b860053570d39adfc5def6bfc681c06d61d0fd6d3b6ce4d2decac54a0085c40a0e466463bcf7a5f02d6c1720fbcaa2c8c61eb4d07a912748c8931fb0a68f4c"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) [ 796.012215][T23595] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 796.158323][T23597] bond248 (unregistering): (slave bridge509): Releasing backup interface 07:40:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000eb00) [ 796.223632][T23677] IPVS: ftp: loaded support on port[0] = 21 [ 796.439972][ T29] audit: type=1804 audit(1599032440.998:1308): pid=23682 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/603/cgroup.controllers" dev="sda1" ino=15777 res=1 errno=0 [ 796.694459][T23597] bond248 (unregistering): Released all slaves 07:40:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ec00) [ 796.844612][T23640] bond13 (unregistering): Released all slaves [ 796.946231][T23593] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 796.966534][ T29] audit: type=1804 audit(1599032441.528:1309): pid=23767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/604/cgroup.controllers" dev="sda1" ino=15777 res=1 errno=0 [ 797.094079][T23641] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 797.161946][T23677] virt_wifi0 speed is unknown, defaulting to 1000 [ 797.162534][T23679] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:40:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x40000000000024a, 0x0) r5 = socket(0x1000000000000010, 0x80802, 0x0) write(r5, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000300)=""/225, &(0x7f00000001c0)=0xe1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r6, @ANYBLOB="08000200e0000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 07:40:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5, 0x0, 0x28, 0x1ff}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfb, {0xf, 0x10}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000ab0e9a1d68d2e5929b02273003cf10064e7e26320dd000000a195aa7c8faf3578423dd9709fa70027edf384cb2ca30c3e7812a7cd7832fdb325def85990984287b6e39c291603e5790000009c1d181aff2d865110bf221a9342a8", @ANYRES16=r6], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) [ 797.236056][T23679] device ipvlan2 entered promiscuous mode 07:40:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ed00) [ 797.289354][T23679] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 797.361580][T23770] IPVS: ftp: loaded support on port[0] = 21 07:40:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ee00) [ 797.851110][T23770] virt_wifi0 speed is unknown, defaulting to 1000 07:40:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002501370000000000000081000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x8, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/102, 0x66}, {&(0x7f0000000d40)=""/191, 0xbf}, {&(0x7f0000000e00)=""/211, 0xd3}, {&(0x7f0000000f00)=""/227, 0xe3}, {&(0x7f0000001000)=""/26, 0x1a}, {&(0x7f0000001040)=""/84, 0x54}, {&(0x7f00000010c0)=""/230, 0xe6}], 0x8, &(0x7f0000001240)=""/94, 0x5e}, 0x10022) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000180)="1390fe2aa36f23cd4e06ed90c3501c7fbb92d8c570bc4aaa33443593b2f69a826f0484b8f3495a6de6ebc259ad2daa6b21b6eca435c3b6bea79b76788947bc102345adb99f567a6a6f24a38d8893636dbde0ca7ebcd50547cddbc46a7e26743940645c75d8371b61d1e351c04cce5ef501a21f83e6c0bb6768b8f6a730e2d28dba61182959e2d9abd185cd62cf7a7dfc3ac0d9ee92bfd2cc93a67f78ae9674c976b51119b262c5f406ae4816c55741a26388a1d8ad24b829a89443ef20c85cc248c4e0bff813044af76ec96200d9") sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x48, 0x1406, 0x8, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$inet6(0xa, 0x2, 0xfffffff8) 07:40:42 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) close(r2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r3, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x2, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'veth1_to_bridge\x00', &(0x7f0000000040)=ANY=[]}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) pipe(&(0x7f0000000140)) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280)=0x3, 0x4) [ 798.073019][T23836] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 798.086309][T23846] IPVS: ftp: loaded support on port[0] = 21 [ 798.180304][T23679] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:40:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000088000000e3280012800a00010076786c616e0000001800028014000d00e0ee2ee2c58342e0b2714679eea312b39978d48cbdf09927b9335feac676ef7174977f42892582419a70c317ee9c48efda8059a88401a34f2b61a990f20ea1f2602ef708269501"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xe8, 0x0, 0x405, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a6}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0xfffffffffffffe5a, 0x4, 0x9f8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4044084) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 798.279078][T23679] device ipvlan2 entered promiscuous mode [ 798.327148][T23679] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 798.406207][T23852] bond248: (slave bridge510): Enslaving as a backup interface with an up link [ 798.469998][T23882] bond248 (unregistering): (slave bridge510): Releasing backup interface 07:40:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ef00) [ 798.693500][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 798.693514][ T29] audit: type=1804 audit(1599032443.258:1313): pid=23903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/607/cgroup.controllers" dev="sda1" ino=15921 res=1 errno=0 [ 798.853470][T23882] bond248 (unregistering): Released all slaves [ 799.014822][T23896] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 799.069375][T23852] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 799.137643][T23907] IPVS: ftp: loaded support on port[0] = 21 [ 799.195648][T23846] virt_wifi0 speed is unknown, defaulting to 1000 [ 799.215995][T23907] virt_wifi0 speed is unknown, defaulting to 1000 [ 800.419690][ T448] tipc: TX() has been purged, node left! [ 800.432267][ T448] tipc: TX() has been purged, node left! [ 800.453081][ T448] tipc: TX() has been purged, node left! 07:40:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x28}}, 0x20004000) 07:40:46 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) close(r2) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r3, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x2, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'veth1_to_bridge\x00', &(0x7f0000000040)=ANY=[]}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) pipe(&(0x7f0000000140)) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280)=0x3, 0x4) 07:40:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f000) 07:40:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000040)=@newtaction={0x34, 0x30, 0x53b, 0x0, 0x0, {}, [{0x20, 0x1, [@m_simple={0x1c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x4}]}, {0x4}}}]}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="7e8f246a6de60670330285694f23e31b3aa00bf594934236a3b2aba5fd7f08fc53364c726c831d2652d25c80deaa262e4d1f28d41406cf27187546a671b920dec2e463725820eb2f80eabc9fd5af6e8c819500f7b1a3ee8a96ee6f9ae5728a1ac1abbd6ca77f773709376ee640b502162c3c1a4732832978e69ef5479d93a54e0c"], 0x48}}, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 07:40:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013702000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 801.735766][T24021] IPVS: ftp: loaded support on port[0] = 21 [ 801.789267][T24025] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 801.826786][ T29] audit: type=1804 audit(1599032446.388:1314): pid=24024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/608/cgroup.controllers" dev="sda1" ino=16162 res=1 errno=0 [ 801.980649][T24035] bond248: (slave bridge511): Enslaving as a backup interface with an up link 07:40:46 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x0) ioctl$int_out(r0, 0x4, &(0x7f0000000280)) unshare(0x2e040480) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$ipvs(0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x25}, 0x14) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xd0, 0x4, 0x5, 0x400, 0x0, 0x6, 0x5, 0x10b, 0x38, 0x16b, 0x9, 0x8, 0x20, 0x2, 0x1, 0x800, 0x400}, [{0x7, 0x400, 0xd5, 0x2, 0x5, 0x9, 0x2}], "05fd583eec0d29e3d4c1375cbd39ba3f18378b98112ffb92bea0a481b256b01db2474d399c9034299fb409cbcb8a3849d8ca35f05568ea125bd6071ef005d68bb1136aa55731557e40cac313367a826d3850c1eda938b5ace03aadcb5deb91e5bfefcd249f1a49be23806401fa0ef02a3d63b4899397d4c769c8dbc0fcef71d47c338e818923d5f7b899743266", [[], [], [], [], [], []]}, 0x6e5) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000002980), &(0x7f00000029c0)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000402}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c014}, 0x48055) [ 802.058838][T24039] bond248 (unregistering): (slave bridge511): Releasing backup interface 07:40:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f100) 07:40:46 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300000b00000000000000fcdbdf25010009000000a3e6b7f80000030006000000dd54ed55e415000002000000e00000000000000002000100000000000000b3000000e000000100"/84], 0x58}}, 0x0) [ 802.416583][ T29] audit: type=1804 audit(1599032446.978:1315): pid=24093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/609/cgroup.controllers" dev="sda1" ino=16162 res=1 errno=0 [ 802.530169][T24039] bond248 (unregistering): Released all slaves 07:40:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xb4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={[], 0x40}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, [], 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffe4d8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 802.638087][T24021] virt_wifi0 speed is unknown, defaulting to 1000 [ 802.644962][T24035] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f200) 07:40:47 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000608b5d383e85c89fc33ba3beac10f3c8f2c58b26ac9c42e252349c0247b69cc4e4df3ef251b56b455a43ad645e9a5bbee3b72460760e53613dd6f85c"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r5, 0x25}, 0x14) splice(r1, &(0x7f0000000140), r5, &(0x7f00000001c0), 0x400, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, 0x0, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 802.896645][T24075] bond248: (slave bridge512): Enslaving as a backup interface with an up link [ 802.963086][T24134] bond248 (unregistering): (slave bridge512): Releasing backup interface [ 802.974548][T24188] IPVS: ftp: loaded support on port[0] = 21 07:40:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f300) [ 803.289312][ T29] audit: type=1804 audit(1599032447.848:1316): pid=24194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/611/cgroup.controllers" dev="sda1" ino=16273 res=1 errno=0 [ 803.343580][T24134] bond248 (unregistering): Released all slaves [ 803.446745][T24188] virt_wifi0 speed is unknown, defaulting to 1000 07:40:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, {0x306, @remote}, 0x34, {0x2, 0x4e23, @loopback}, 'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @rand_addr, @link_local}}}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010f37f07001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000fcff130012800c0001066d6163766cf8858db309f5cf8ddc6559d5616e0004000281"], 0x40}}, 0x0) [ 804.471556][T24188] IPVS: ftp: loaded support on port[0] = 21 [ 804.505100][T24188] virt_wifi0 speed is unknown, defaulting to 1000 [ 805.817965][ T448] tipc: TX() has been purged, node left! [ 805.829139][ T448] tipc: TX() has been purged, node left! 07:40:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1000000000000010, 0x80000, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet6_buf(r3, 0x29, 0xd3, &(0x7f00000003c0)=""/211, &(0x7f00000000c0)=0xd3) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000025000100"/20, @ANYRES32=r5, @ANYBLOB="000029efec00000000020000"], 0x24}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000280)=0xc) r7 = socket(0x1000000000000010, 0x80802, 0x0) write(r7, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, 0xffffffffffffffff, 0x24000800) 07:40:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013703000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f400) 07:40:51 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0xfffffffc) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'veth0_to_bond\x00', {}, 0x5}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x110, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x50}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004081) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000), 0x10) r2 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8918, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x4f23, @private=0xa010100}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001880)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x58, 0x0, 0x100, 0x170bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000018c0)={0x0, 0x3f}, &(0x7f0000001900)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001940)=@assoc_value={r5, 0x4}, 0x8) 07:40:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) write$tun(r0, &(0x7f0000000d80)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0], "e0"}}}}}, 0x67) [ 806.700878][T24323] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 806.717199][T24322] IPVS: ftp: loaded support on port[0] = 21 [ 806.849622][ T29] audit: type=1804 audit(1599032451.408:1317): pid=24372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/612/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 806.917478][T24329] bond248: (slave bridge513): Enslaving as a backup interface with an up link [ 806.965203][T24322] virt_wifi0 speed is unknown, defaulting to 1000 [ 806.979359][T24323] bond248 (unregistering): (slave bridge513): Releasing backup interface 07:40:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f500) [ 807.360210][T24323] bond248 (unregistering): Released all slaves [ 807.368814][ T29] audit: type=1804 audit(1599032451.928:1318): pid=24384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/613/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 807.446888][T24363] __nla_validate_parse: 4 callbacks suppressed [ 807.446898][T24363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 807.547770][T24375] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 807.581108][T24419] IPVS: ftp: loaded support on port[0] = 21 07:40:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f600) [ 807.965165][ T29] audit: type=1804 audit(1599032452.528:1319): pid=24432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/614/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 807.991930][T24329] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f700) [ 808.536686][ T29] audit: type=1804 audit(1599032453.098:1320): pid=24441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/615/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 808.833218][T24375] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 07:40:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f500) 07:40:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f800) [ 809.065220][ T29] audit: type=1804 audit(1599032453.628:1321): pid=24456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/616/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 809.277990][ T29] audit: type=1804 audit(1599032453.838:1322): pid=24457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/551/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 07:40:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013704000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:54 executing program 1: connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@unspec, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000052abe6da52dae8026c947087c95e3d21e3ac8bd650f8c0db0952d2e3228c2fdf352bfb9a883b4ae3746c7944d82b", @ANYRES16=r1, @ANYBLOB="110000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="1400020069703665727370616e30000000000000"], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001c00)={'sit0\x00', &(0x7f0000001b80)={'sit0\x00', 0x0, 0x2f, 0x80, 0x4, 0x0, 0x42, @private1, @empty, 0x80, 0x8000, 0x0, 0xffffffff}}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f00000012c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fbdbdf250100000008000100020000000800010000050000080001000400000008000300eb7d44a1b7d88de4b50f15929f16e70272c116732cffcbe8af1fa39ce3692b0b050035e1948114b7d8f571cc55d5c8180be73eb7fbcf32c1", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x800) r5 = socket(0x1000000000000010, 0x80802, 0x0) write(r5, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) r6 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 809.532783][T24484] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 809.783654][T24486] bond248: (slave bridge514): Enslaving as a backup interface with an up link 07:40:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f900) 07:40:54 executing program 1: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x6, 0x1, '(\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x13, 0x1, '$/))\x96*-^*[\\.^\xf0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000d4}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x840) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x1}, 0x10) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3f}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xe5263efaef9d2075}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r1, 0x500, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}}, 0x48010) r2 = accept(r0, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80) recvfrom$rose(r2, &(0x7f0000000700)=""/242, 0xf2, 0x40010003, &(0x7f0000000800)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x40) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$FIOCLEX(r0, 0x5451) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') r3 = accept(r2, &(0x7f0000000900)=@can, &(0x7f0000000980)=0x80) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffb, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'vlan0\x00'}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000ac0)={0x0, 0x1000, "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"}, &(0x7f0000001b00)=0x1008) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b80)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) [ 809.910785][T24509] bond248 (unregistering): (slave bridge514): Releasing backup interface 07:40:54 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/26, 0xfffffffffffffeff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x1c, 0x25, 0x10, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0x17, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r9 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r8, 0x400454ce, r10) splice(r0, 0x0, r2, 0x0, 0x200000000e22c, 0x0) [ 810.113117][ T29] audit: type=1804 audit(1599032454.678:1323): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/617/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 810.337071][T24509] bond248 (unregistering): Released all slaves [ 810.447090][T24525] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 811.551819][ T448] tipc: TX() has been purged, node left! 07:40:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001480)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") clock_gettime(0x5, &(0x7f0000000140)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000001900)=@can, &(0x7f0000001980)=0x80) recvmsg$can_bcm(r5, &(0x7f0000000280)={&(0x7f0000001840)=@hci, 0x80, &(0x7f0000001640)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f00000016c0)=""/17, 0x11}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001700)=""/102, 0x66}, {&(0x7f0000001780)=""/154, 0x9a}, {&(0x7f0000000380)=""/92, 0x5c}], 0x8}, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x7d, r3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r8, 0x2f688245c11c0a37, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x30, r8, 0x2, 0x70b924, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c001}, 0x8001) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 07:40:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r0, r1, 0x0, 0xf03b0000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x5, 0x2, 0xf87, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x8) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 07:40:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fa00) 07:40:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013705000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000074774270600fd573cd41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300571c0012000b0001006d616373656300e10b00020005000d00000300000a0005c01000000000ffdf0008000a"], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x7b, "d7f312ff1f691c41ffc817b894c822bcb1719d814c803cfc33ea78aa1dab92e721bea5e69682191d2ce1c8237aaef4892f678eeda2f9e8b4541031c4c7db402ea2cd85211af7965f518d3ada13d1560485ffdb5e2e26d2c1e730f7422e49091c71a216ff6c875ebe0ec9f7d0f237c71a2897506b4fe049d6053cef"}, &(0x7f0000000000)=0x83) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x400, 0x7f, 0x4, 0x401, 0x1, 0x79, 0x1f, 0xffffff01, r1}, &(0x7f0000000180)=0x20) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 812.162342][T24601] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 812.255377][ T29] audit: type=1804 audit(1599032456.819:1324): pid=24611 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/618/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 812.364863][T24604] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 812.408924][T24604] device team_slave_0 entered promiscuous mode [ 812.415188][T24604] device team_slave_1 entered promiscuous mode [ 812.515244][T24604] device macsec1 entered promiscuous mode [ 812.569727][T24604] device team0 entered promiscuous mode [ 812.676396][T24606] bond248: (slave bridge515): Enslaving as a backup interface with an up link [ 812.747728][T24631] bond248 (unregistering): (slave bridge515): Releasing backup interface 07:40:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fb00) [ 813.016621][ T29] audit: type=1804 audit(1599032457.579:1325): pid=24661 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/619/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 07:40:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe7a, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00001900f3d3f12db26f86000002900d75000000002273797a3000", @ANYRESHEX=r0, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) [ 813.256931][T24631] bond248 (unregistering): Released all slaves 07:40:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fc00) [ 813.397840][T24657] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 813.501099][T24606] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x3, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="f9ffc0844864933773ea841bfddc474ecac1b84b918de97d64daadfd708ab3ca2ec83dd2c4641a2a2cb2e1c9ecb63e294b7e63617aaa7b393a10f01ce9d5cb8db12bb7356fdd03d059a2f89b6e9d11fa01a37028c9693b99b11ce187fe05cbd99150e197930b9f9688002523cafe569ff838172b3dafcef70173b0c2bcf5983b24499ea361b10f", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0xff}, &(0x7f0000000040)=0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 813.543747][ T29] audit: type=1804 audit(1599032458.099:1326): pid=24711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/620/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 07:40:58 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="2400000052000108000100000008000280b90d00000000", 0x17) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x1, 0x6, 0x40, "1170e8673c39adbcc39506bfdf742ce533019cfdb9bc92bd3530f02815a99eadeb95670a7fa6b58442140e22efeec670539fca99a517ac04c0e48a89d340e6", 0x2}, 0x60) bind$qrtr(r0, &(0x7f0000000140)={0x2a, 0x0, 0x4000}, 0xc) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffff9}, 0x1c) 07:40:58 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280008000000010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x2}, {0x8, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x7, 0x81}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc8, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_macvtap\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x47}, @TCA_U32_POLICE={0x90, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x67bf, 0x3, 0x8e, 0x6, 0x3, {0x80, 0x6, 0x3, 0x3ff, 0x3, 0x5}, {0x4, 0x2, 0x25, 0x7ff, 0x4, 0x1}, 0x6, 0x5, 0xaafc}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000005, 0xfffffffe, 0x9, 0x3f, {0x1, 0x1, 0xfff7, 0x2, 0x7ac, 0x3f}, {0xc7, 0x2, 0x81, 0x401, 0x3, 0x4}, 0x7ff, 0x3ff, 0xbf7}}]}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x401}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x104}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05f6"], 0xd) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="000026bd7000fddbdf250a0000004c00028006000e004e22000006000e004e22000008000400ce2f000006000e004e200000080006000100010006000f000400000006000b000a000000080005000180000005000d0001000000040003800c000280080003000100000024c8dbb51118c8f82e000280060002004e2300000800040000020000080003000100000005000d00000000000800060001000080"], 0xa4}, 0x1, 0x0, 0x0, 0x48091}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20008801) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}]}, 0x1c}}, 0x404c080) 07:40:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013706000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:40:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fd00) 07:40:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013705000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 813.919770][T24736] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:40:58 executing program 0: r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000001400), 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 07:40:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x5c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'rr\x00', 0x1, 0xb63, 0x34}, 0x2c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 814.188748][T24738] bond248: (slave bridge516): Enslaving as a backup interface with an up link [ 814.234094][T24744] bond248 (unregistering): (slave bridge516): Releasing backup interface 07:40:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fe00) [ 814.509003][ T29] audit: type=1804 audit(1599032459.069:1327): pid=24795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/622/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 07:40:59 executing program 1: unshare(0x40000000) r0 = syz_genetlink_get_family_id$ipvs(0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x48092) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) bind$phonet(0xffffffffffffffff, &(0x7f00000001c0)={0x23, 0x7, 0x1, 0x3f}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000e08d274464445b264006f4747489090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000300f1ff08000100753332"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r4, 0x29, 0x8, 0x3f, 0x5, 0x28, @mcast1, @local, 0x50, 0x7, 0xffffffff, 0x9}}) [ 814.630511][T24744] bond248 (unregistering): Released all slaves [ 814.710354][T24812] IPVS: ftp: loaded support on port[0] = 21 [ 814.752548][T24771] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 814.918291][T24785] bond13: (slave bridge25): Enslaving as a backup interface with an up link [ 814.971801][T24787] bond13 (unregistering): (slave bridge25): Releasing backup interface 07:40:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ff00) [ 815.265780][ T29] audit: type=1804 audit(1599032459.829:1328): pid=24877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/623/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 [ 815.274256][T24787] bond13 (unregistering): Released all slaves [ 815.352592][T24738] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 815.378309][T24831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.433068][T24812] virt_wifi0 speed is unknown, defaulting to 1000 07:41:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013707000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:41:00 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, 0xffffffffffffffff, 0x0, 0xf03b0000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00', @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002700)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001600)=""/4, 0x4}, {&(0x7f0000001640)=""/56, 0x38}], 0x4, &(0x7f00000016c0)=""/4096, 0x1000}, 0x40000040) 07:41:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2000000000000152, &(0x7f0000000000)=[{0xaf, 0x3, 0x7}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket(0x1000000000000010, 0x80802, 0x0) r3 = accept4$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000a00)=0x1c, 0x80000) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000a40)={@remote}, &(0x7f0000000a80)=0x14) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280)=0x4, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) [ 815.486985][T24831] IPVS: ftp: loaded support on port[0] = 21 [ 815.587839][T24929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.629543][T24831] virt_wifi0 speed is unknown, defaulting to 1000 [ 815.655093][T24936] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:41:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fff0) [ 815.808929][T24948] bond248: (slave bridge517): Enslaving as a backup interface with an up link 07:41:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 815.962898][T24936] bond248 (unregistering): (slave bridge517): Releasing backup interface [ 815.986101][ T29] audit: type=1804 audit(1599032460.549:1329): pid=24995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/624/cgroup.controllers" dev="sda1" ino=16305 res=1 errno=0 07:41:00 executing program 0: pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") tee(r2, 0xffffffffffffffff, 0x9, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe78f, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x8001}, 0x4) 07:41:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x2000000000000152, &(0x7f0000000000)=[{0xaf, 0x3, 0x7}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket(0x1000000000000010, 0x80802, 0x0) r3 = accept4$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000a00)=0x1c, 0x80000) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000a40)={@remote}, &(0x7f0000000a80)=0x14) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280)=0x4, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) 07:41:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffff000) [ 816.521637][T24936] bond248 (unregistering): Released all slaves [ 816.657062][T24975] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:41:01 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f000000000000000000007520041f22"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) [ 816.749462][ T29] audit: type=1804 audit(1599032461.309:1330): pid=25051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/625/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 816.849429][T24987] bond248: (slave bridge518): Enslaving as a backup interface with an up link [ 816.936278][T25009] bond248 (unregistering): (slave bridge518): Releasing backup interface 07:41:01 executing program 0: syz_emit_ethernet(0xaa, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x37, 0x9c, 0x67, 0x0, 0x5, 0x6, 0x0, @multicast1, @private=0xa010100, {[@end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x68, 0x1, 0x7, [{@broadcast, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xfff}]}]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x6, 0x0, 0x8, {[@mss={0x2, 0x4, 0x2}, @nop, @sack={0x5, 0x2}]}}, {"b18085a5984df7daac066bff0d1b8eb18507cc1961b762d84b8906313858fcbbc6c0ced727449bb6249971f1dc80fa99249c728fea3fba8280609af08b14dc73"}}}}}}, 0x0) [ 817.325417][T25009] bond248 (unregistering): Released all slaves [ 817.851338][ T448] tipc: TX() has been purged, node left! 07:41:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013707000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:41:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1ffffff1f) 07:41:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24d4895cb81222f50f529b21fdecbcdbfb740c8e86985a00000008000640ff67e397d6491f01a06fffff"], 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000e0) 07:41:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffd}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x1015) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket(0x2a, 0x6, 0x3) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet6_dccp_int(r3, 0x21, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000005c0)={'veth1_to_batadv\x00', 0x3, 0x10001}) 07:41:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013708000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 819.693740][T25162] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 819.804880][ T29] audit: type=1804 audit(1599032464.369:1331): pid=25163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/626/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 819.873967][ T29] audit: type=1804 audit(1599032464.439:1332): pid=25202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir720133708/syzkaller.4BIkyC/558/cgroup.controllers" dev="sda1" ino=16368 res=1 errno=0 [ 819.881645][T25166] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 820.168040][T25167] bond248: (slave bridge519): Enslaving as a backup interface with an up link [ 820.254494][T25171] bond11: (slave bridge14): Enslaving as a backup interface with an up link [ 820.301589][T25173] bond248 (unregistering): (slave bridge519): Releasing backup interface 07:41:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100002800) [ 820.490255][ T29] audit: type=1804 audit(1599032465.049:1333): pid=25169 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/626/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 07:41:05 executing program 3: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'caif0', 0x32, 0x39}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 07:41:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 07:41:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffffff0) 07:41:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}], {0x95, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x41100, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 820.804305][T25173] bond248 (unregistering): Released all slaves [ 820.876854][ T29] audit: type=1804 audit(1599032465.439:1334): pid=25268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/627/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 820.956026][T25203] bond11 (unregistering): (slave bridge14): Releasing backup interface 07:41:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000180)={0x78, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xbd0}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}}]}, @IPSET_ATTR_DATA={0x4}]}, 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x42c, 0x3f4, 0x200, 0x70bd29, 0x25dfdbfd, {0x6, 0x1, 0x37, [0x1ff, 0x11800, 0x8000, 0x4, 0x5, 0x401, 0x2, 0x1, 0x6, 0x0, 0x8f, 0x9, 0x400, 0x8, 0x1, 0x9d5f, 0xb0, 0xa7, 0x0, 0x36a, 0x9, 0xfff, 0x401, 0xfffffffd, 0x5, 0x7, 0xfffffffa, 0x1ff, 0xfffffffc, 0x1, 0x81, 0x3f4b, 0x80, 0x8001, 0x4, 0x1f, 0x2, 0x1, 0x1c, 0x1c, 0x5, 0x6, 0x5, 0x1d0e, 0x0, 0xff, 0xfffffffd, 0xffff2208, 0x4, 0x3, 0x80, 0x86d, 0x4, 0x9, 0x800, 0x40, 0x6, 0xb0, 0x0, 0x4000000, 0x3, 0x8, 0x2, 0x4], [0x3, 0x9, 0x7, 0x6, 0x6, 0x3, 0x8, 0x1000, 0x0, 0x20, 0x10001, 0x0, 0x8, 0x80000000, 0x7, 0x9, 0x5, 0x8ee, 0x0, 0x3, 0x6b3, 0x481, 0x9, 0x6, 0xfffffff7, 0x2, 0xfffffff7, 0x0, 0x3, 0xff, 0x9, 0x5, 0x3f, 0xcc, 0x5, 0xa72e, 0x9, 0x0, 0x80, 0x8000, 0x762d, 0x6, 0x75d, 0x10000, 0x6, 0x8001, 0x80000001, 0x5, 0x882, 0x2, 0x1, 0x6, 0x4c8, 0x3, 0xb6d, 0x7, 0x800, 0x45, 0x9, 0x9, 0x1f, 0x2, 0xffff0000, 0x9], [0xd81, 0xffff, 0x7c00000, 0x9, 0x4c9b, 0xc82, 0x3f2ae18, 0x64, 0x401, 0x1, 0x6, 0x3ff, 0x3f, 0x7e, 0xf17, 0x8, 0x3, 0x8, 0x5, 0x179, 0x35b, 0x1, 0x5e8a, 0xfffffff8, 0x4, 0x20, 0xa4, 0x6, 0x8, 0x8, 0xffff, 0x1f, 0x4, 0x80000001, 0x5, 0x9, 0x7fff, 0x3, 0x4, 0x1ff, 0x1, 0x6, 0x7, 0x5, 0x80000001, 0x4, 0xa0f, 0x101, 0x200, 0x0, 0x1ff, 0x9, 0x8, 0xecf, 0x95, 0x9fee, 0x80, 0x0, 0x8, 0x8, 0xfd2, 0x40, 0x4, 0x1], [0x1, 0x7fff, 0x5, 0x200, 0xbc1, 0xb03, 0x20, 0x5, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x867, 0x4, 0x6, 0x0, 0x3, 0x2, 0x8f0, 0x2, 0xc1, 0x0, 0x3ff, 0x9, 0x9, 0x5, 0x40, 0x2, 0x100, 0x9, 0x1f, 0x5, 0xa546, 0x0, 0x80000000, 0x80, 0x10001, 0xd47f, 0x5, 0x7fffffff, 0x0, 0xf6, 0x7ff, 0x9b7, 0x6b, 0x0, 0x8000, 0x120, 0x2, 0xa02, 0x81, 0x0, 0x4, 0x10000, 0x10001, 0x7, 0xab, 0x536, 0xffffffff, 0x3, 0x89b, 0x3, 0x10000], 0xb, ['-I%}@#{\x18\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004801) r4 = socket$inet6(0xa, 0x800, 0x52f4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6, 0x3, [0x0, 0x7fff, 0x7]}, 0xe) sendfile(r2, r1, 0x0, 0x100000001) r5 = socket(0x1000000000000010, 0x80802, 0x0) write(r5, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000000000/0xc00000)=nil, 0xc00000}, &(0x7f0000000740)=0x10) r6 = getuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @null, r6}) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') [ 821.338536][T25203] bond11 (unregistering): Released all slaves 07:41:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x40088c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000000019386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x878c8a3ab633af09, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180), &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x5, 0x7, 0x7}, &(0x7f0000000480)=0x10) [ 821.415998][T25162] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:41:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) r1 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000004c40)=[{{&(0x7f0000000b80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000bc0)="89", 0xfef0}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002180)=[{{&(0x7f0000000540)=@nl, 0x80, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/238, 0xee}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000000a40)=""/246, 0xf6}, {&(0x7f0000000c00)=""/244, 0xf4}, {&(0x7f0000000d00)=""/198, 0xc6}], 0x9, &(0x7f0000000ec0)=""/4096, 0x1000}, 0xb3c5}, {{&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001f40)=""/129, 0x81}, {&(0x7f0000002000)=""/133, 0x85}], 0x2, &(0x7f0000002100)=""/103, 0x67}, 0x8}], 0x2, 0x10040, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = socket(0x27, 0x800, 0x9d8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00000000000000000300f1ff08000100753332"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r7, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={r7, @loopback, @multicast1}, 0xc) 07:41:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x25}, 0x14) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0x81) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x20) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 07:41:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013709000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 821.747143][T25365] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:41:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013708000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 821.783599][ T29] audit: type=1804 audit(1599032466.349:1335): pid=25359 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/629/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 821.950078][T25369] bond248: (slave bridge520): Enslaving as a backup interface with an up link [ 821.969285][T25370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 822.059286][T25386] bond248 (unregistering): (slave bridge520): Releasing backup interface 07:41:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0xffffffffffffff09, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 822.396758][T25386] bond248 (unregistering): Released all slaves [ 822.421067][ T29] audit: type=1804 audit(1599032466.989:1336): pid=25423 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/630/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 822.484545][T25410] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 822.642961][T25416] bond18: (slave bridge38): Enslaving as a backup interface with an up link [ 822.676466][T25417] bond18 (unregistering): (slave bridge38): Releasing backup interface 07:41:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000100)={0x7c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 822.914707][T25417] bond18 (unregistering): Released all slaves [ 822.980385][T25365] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 823.039156][T25370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 823.062988][ T29] audit: type=1804 audit(1599032467.629:1337): pid=25536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/631/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 07:41:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700005abac43d000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000002680)={r0}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) 07:41:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002501370a000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) [ 823.301764][T25545] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 823.394927][T25545] bond11 (unregistering): Released all slaves 07:41:08 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r2, 0x25}, 0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000040)={0x10}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = accept(0xffffffffffffffff, &(0x7f0000001d40)=@nl=@unspec, &(0x7f0000001dc0)=0x80) bind$isdn_base(r3, &(0x7f0000001e00)={0x22, 0x6f, 0x9, 0x0, 0x4}, 0x6) r4 = socket(0x1000000000000010, 0x80802, 0x0) write(r4, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r5, &(0x7f00000000c0), 0x0, 0x20040000) [ 823.524654][T25582] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 823.779990][T25614] bond248: (slave bridge521): Enslaving as a backup interface with an up link [ 823.856949][T25620] bond248 (unregistering): (slave bridge521): Releasing backup interface 07:41:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 824.074763][ T29] audit: type=1804 audit(1599032468.639:1338): pid=25671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/632/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 824.206198][T25620] bond248 (unregistering): Released all slaves 07:41:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c013364ad000800000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e6402816ccdd9d60e7b0800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x1) r5 = socket(0x1000000010, 0x80003, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)={0x68, 0x0, 0x300, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, '-wlan1GPLGPL^:\xa1)+-\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fcdbdfd99a3bac00050001000000000008000400ffffffff14000600000051e0b2fd1a502678c507022b0e75954aded3ceec732fe631509aa0f73833c928fa62dd8a34011c89698bc8b6bf810858e43a02e0d1e8bcb30d78f37078d125f1974e5876656a94888b35880afcadfad34d944efa9ebbc9fde0bc0cb6042b27b2f61e0887a44710ba9fa80a765a1c9d28ccf7482cab86bb5557bc90d2971ea63c7c9e6636ec0cf942d376802c0969d5652ddd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) sendmmsg$alg(r5, &(0x7f0000000100), 0x492492492492711, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000007f002504fcffffff0000000010000000", @ANYRES32=r8, @ANYBLOB="000000004102040008002c000500000008002800950b0000"], 0x30}}, 0x0) [ 824.281824][T25550] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 824.316165][T25582] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 07:41:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rds(r2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000bff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="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"], 0x40}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'nat\x00', 0x0, 0x4, 0x0, [], 0x2, &(0x7f0000000000)=[{}, {}], 0x0}, &(0x7f0000000100)=0x78) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x16c525aa4ad89e84}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x400, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @multicast}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x800) [ 824.506532][T25635] bond248: (slave bridge522): Enslaving as a backup interface with an up link 07:41:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000423000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000440)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000b06010200000000000000000000000005000100070000000900020073797a300000000004002780"], 0x2c}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r0}, 0x8) bind$phonet(r2, &(0x7f00000004c0)={0x23, 0x3, 0x0, 0x8}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x1000000000000010, 0x80802, 0x0) write(r4, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1897a5c1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0xfff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa82}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x7ca3ced3e4605986}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = accept4$tipc(r4, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x80000) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000580), &(0x7f00000005c0)=0x8) sendfile(r3, r1, 0x0, 0x100000001) [ 824.553767][T25707] bond248 (unregistering): (slave bridge522): Releasing backup interface 07:41:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001100030e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000667289af00000023000000000005000000000000"], 0x34}}, 0x0) [ 824.723588][ T29] audit: type=1804 audit(1599032469.289:1339): pid=25756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/633/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 824.819003][ T29] audit: type=1804 audit(1599032469.379:1340): pid=25763 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/633/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 824.878924][ T29] audit: type=1800 audit(1599032469.379:1341): pid=25763 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16384 res=0 errno=0 07:41:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11a, 0x11a, 0x8, [@volatile={0x1, 0x0, 0x0, 0x9, 0x5}, @datasec={0x8, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x7f, 0x3f}, {0x2, 0x5bb84528, 0x9}, {0x2, 0x6, 0x1}, {0x5, 0x3, 0xfffff715}], "40ba"}, @typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @union={0x3, 0x9, 0x0, 0x5, 0x0, 0x81, [{0xc, 0x0, 0x9}, {0x9, 0x2, 0x4}, {0xa, 0x1, 0x80}, {0xc, 0x2, 0x8}, {0x3, 0x1}, {0xc, 0x4, 0x1cf}, {0x0, 0x2, 0x3c}, {0x10, 0x5}, {0x0, 0x5, 0x9}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1, 0x1}, @struct={0x7fffffff, 0x4, 0x0, 0x4, 0x1, 0x7, [{0x5, 0x1, 0x7fffffff}, {0x3, 0x5, 0xffffffe7}, {0x1, 0x4, 0x6}, {0x9, 0x2, 0xffffffff}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000680)=""/110, 0x13c, 0x6e, 0x1}, 0x20) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0x2, 0x100, 0x0, 0x3, 0x4, [{0x6, 0x8, 0x100000001, [], 0x4}, {0x3, 0x4141, 0xffffffffffffffff, [], 0x4}, {0x7f1, 0xf5, 0x5fb}, {0x8, 0xfff, 0xad, [], 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) write(r3, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000500)={@none}) r4 = accept(r2, &(0x7f00000001c0)=@isdn, &(0x7f0000000140)=0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x404, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000903}, 0x4004) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7fffffff}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac01]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x0, @remote}, {0xa, 0x0, @broadcast}, {0xa, 0x0, @random="0bef48a2aaa7"}, {0xa, 0x0, @remote}, {0xa, 0x0, @dev={[], 0x28}}, {0xa}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendfile(r6, r2, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0xe) [ 824.996101][T25707] bond248 (unregistering): Released all slaves [ 825.159166][ T29] audit: type=1804 audit(1599032469.719:1342): pid=25799 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir698917911/syzkaller.9On6Ry/634/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 825.250095][T25759] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 07:41:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002501370c000000000000d2000000", @ANYRES32=r8], 0x20}}, 0x0) socket(0x0, 0x5, 0x800000) 07:41:10 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x5, 0x9, [0x800, 0x0, 0xfff, 0x2, 0x0, 0x8, 0x40, 0x2, 0x4]}, 0x1a) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000080)=0x4) r5 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x66, &(0x7f0000000500), &(0x7f00000001c0)=0x8) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000000)={0x3}) [ 825.515951][T25945] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 825.543842][ T8949] BUG: unable to handle page fault for address: fffffbfff3249863 [ 825.551575][ T8949] #PF: supervisor read access in kernel mode [ 825.557539][ T8949] #PF: error_code(0x0000) - not-present page [ 825.563498][ T8949] PGD 21ffe5067 P4D 21ffe5067 PUD 21ffe4067 PMD 0 [ 825.569996][ T8949] Oops: 0000 [#1] PREEMPT SMP KASAN [ 825.575181][ T8949] CPU: 1 PID: 8949 Comm: kworker/1:7 Not tainted 5.9.0-rc1-syzkaller #0 [ 825.583488][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.593619][ T8949] Workqueue: events l2cap_chan_timeout [ 825.599077][ T8949] RIP: 0010:check_memory_region+0xdb/0x180 [ 825.604870][ T8949] Code: 80 38 00 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 <80> 38 00 74 f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c [ 825.624459][ T8949] RSP: 0018:ffffc90008e878c0 EFLAGS: 00010082 [ 825.630517][ T8949] RAX: fffffbfff3249863 RBX: fffffbfff3249864 RCX: ffffffff815a11de [ 825.638478][ T8949] RDX: fffffbfff3249864 RSI: 0000000000000008 RDI: ffffffff9924c318 [ 825.646438][ T8949] RBP: fffffbfff3249863 R08: 0000000000000000 R09: ffffffff9924c31f [ 825.654400][ T8949] R10: fffffbfff3249863 R11: 000000000007e188 R12: 0000000000000000 [ 825.662367][ T8949] R13: ffff88806210ec8a R14: ffff88806210e2c0 R15: 0000000000000000 [ 825.670337][ T8949] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 825.679252][ T8949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 825.685826][ T8949] CR2: fffffbfff3249863 CR3: 00000000620d4000 CR4: 00000000001506e0 [ 825.693791][ T8949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 825.701750][ T8949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 825.709705][ T8949] Call Trace: [ 825.712991][ T8949] __lock_acquire+0xfbe/0x5640 [ 825.717750][ T8949] ? trace_hardirqs_off+0x27/0x210 [ 825.722857][ T8949] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 825.728826][ T8949] ? debug_object_assert_init+0x246/0x2e0 [ 825.734537][ T8949] ? debug_object_init_on_stack+0x20/0x20 [ 825.740248][ T8949] lock_acquire+0x1f1/0xad0 [ 825.744746][ T8949] ? lock_sock_nested+0x3b/0x110 [ 825.749674][ T8949] ? lock_release+0x8e0/0x8e0 [ 825.754341][ T8949] ? mark_held_locks+0x9f/0xe0 [ 825.759097][ T8949] ? lock_is_held_type+0xbb/0xf0 [ 825.764025][ T8949] _raw_spin_lock_bh+0x2f/0x40 [ 825.768890][ T8949] ? lock_sock_nested+0x3b/0x110 [ 825.773817][ T8949] lock_sock_nested+0x3b/0x110 [ 825.778631][ T8949] l2cap_sock_teardown_cb+0x88/0x400 [ 825.783913][ T8949] l2cap_chan_del+0xad/0x1300 [ 825.788580][ T8949] l2cap_chan_close+0x118/0xb10 [ 825.793422][ T8949] ? lock_acquire+0x1f1/0xad0 [ 825.798090][ T8949] ? l2cap_retransmit_all+0x760/0x760 [ 825.803451][ T8949] ? lock_release+0x8e0/0x8e0 [ 825.808120][ T8949] ? lock_downgrade+0x830/0x830 [ 825.812961][ T8949] ? __schedule+0x88e/0x21e0 [ 825.817540][ T8949] ? _raw_spin_unlock_irq+0x1f/0x80 [ 825.822731][ T8949] l2cap_chan_timeout+0x173/0x450 [ 825.827750][ T8949] process_one_work+0x94c/0x1670 [ 825.832699][ T8949] ? lock_release+0x8e0/0x8e0 [ 825.837376][ T8949] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 825.842738][ T8949] ? rwlock_bug.part.0+0x90/0x90 [ 825.847669][ T8949] worker_thread+0x64c/0x1120 [ 825.852342][ T8949] ? process_one_work+0x1670/0x1670 [ 825.857531][ T8949] kthread+0x3b5/0x4a0 [ 825.861588][ T8949] ? __kthread_bind_mask+0xc0/0xc0 [ 825.866688][ T8949] ? __kthread_bind_mask+0xc0/0xc0 [ 825.871793][ T8949] ret_from_fork+0x1f/0x30 [ 825.876193][ T8949] Modules linked in: [ 825.880074][ T8949] CR2: fffffbfff3249863 [ 825.884220][ T8949] ---[ end trace 1189b626284d9c8b ]--- [ 825.889672][ T8949] RIP: 0010:check_memory_region+0xdb/0x180 [ 825.895469][ T8949] Code: 80 38 00 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 50 <80> 38 00 74 f2 eb d4 41 bc 08 00 00 00 48 89 ea 45 29 dc 4d 8d 1c [ 825.915058][ T8949] RSP: 0018:ffffc90008e878c0 EFLAGS: 00010082 [ 825.921111][ T8949] RAX: fffffbfff3249863 RBX: fffffbfff3249864 RCX: ffffffff815a11de [ 825.929071][ T8949] RDX: fffffbfff3249864 RSI: 0000000000000008 RDI: ffffffff9924c318 [ 825.937035][ T8949] RBP: fffffbfff3249863 R08: 0000000000000000 R09: ffffffff9924c31f [ 825.944995][ T8949] R10: fffffbfff3249863 R11: 000000000007e188 R12: 0000000000000000 [ 825.952956][ T8949] R13: ffff88806210ec8a R14: ffff88806210e2c0 R15: 0000000000000000 [ 825.960916][ T8949] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 825.969831][ T8949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 825.976402][ T8949] CR2: fffffbfff3249863 CR3: 00000000620d4000 CR4: 00000000001506e0 [ 825.984371][ T8949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 825.992334][ T8949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 826.000297][ T8949] Kernel panic - not syncing: Fatal exception in interrupt [ 826.008756][ T8949] Kernel Offset: disabled [ 826.013112][ T8949] Rebooting in 86400 seconds..