2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000000)="120000001a002517fc85bc04fef6000d0a0d", 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 17:53:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xf]}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17:53:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x11, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x25, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="08000400", @ANYRES16=r6, @ANYBLOB="95c40000000000000000010001590000000009410000004c00180000006062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x620, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x12, 0x7fffffff, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000002580)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)='veth0_to_team\x00', 0x402}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0x2a9ad000) r7 = socket$inet(0x2b, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000200)="6b5519522c01e790bff83ef2fb9b2f21", 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000240)={&(0x7f0000000140)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x30, 0x40004000}, 0x90) 17:53:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x40, 0x64, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 17:53:38 executing program 5: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000600)={r6, 0x618, 0x7f}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000640)=0x5, 0x4) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000440)={r8, 0x1, 0x19, "6f182471cc442afa68776853976e030e7ed8df47de8477d462368ee720535e32a809fe2892d481ab5630c2785b1d1ee60db287eba48243409f121f7176d02b2fde28b10ca28a9f4062d26bd595e7f043645751fb2f0eae0e8bd79b943e57d94690864c1a559a1511d7c302fdf1dc583f50d8caa2dc1ed712a59bfda9e177a343f248887701fa20202312831d12b0c9987ba4dd79cdb6b980e7fbbac6ed7e2b4fbfa0ad0e704fd62987fdb35327961fb6afcd28619ac9404d1c344549e0009888830c7160825b4b5f7e9a6565efdb2d34ab14776ab747d19af158cf840140c1c5c7390189c7c17a390f4fc9ae51f8e1aae770fcbe150858902a"}) recvfrom(r1, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x0, 0x0, 0xfffffe53) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:53:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) [ 259.575302] sctp: [Deprecated]: syz-executor.4 (pid 10706) Use of int in max_burst socket option deprecated. [ 259.575302] Use struct sctp_assoc_value instead 17:53:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000fcfe070000040000f25c005808308c31fb4298d4563853acea8ad8d1151b0795f6ba25a59946d348408e4eff698259370e2a8e6509ab5fd337dd66da6102ee909d32de4467aa681d0f490e64ff804d34efbe6c61f29b008c1ed8643140"], 0xd) [ 259.697326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.697559] sctp: [Deprecated]: syz-executor.4 (pid 10713) Use of int in max_burst socket option deprecated. [ 259.697559] Use struct sctp_assoc_value instead [ 259.727375] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 259.777276] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.816831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:53:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) 17:53:39 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x89e3, 0xfffffffffffffffe) 17:53:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(r0, 0x800c6613, 0x0) 17:53:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000280), 0x400, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000200)=""/163, &(0x7f00000002c0), &(0x7f0000000080), 0x3, r1}, 0x38) 17:53:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffbfffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) [ 260.297683] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 260.307622] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 260.322840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:39 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:53:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@acquire={0x134, 0x17, 0x7, 0x0, 0x0, {{@in=@empty}, @in6=@local, {@in=@broadcast, @in6=@remote}, {{@in6=@ipv4={[], [], @local}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x12}}]}, 0x134}, 0x8}, 0x0) 17:53:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x18, 0x15, 0x205, 0x0, 0x0, {0x23, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) 17:53:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0x3ff800) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x4000}], 0x1, 0x3ff800, 0x0) [ 260.357513] device bridge1 entered promiscuous mode [ 260.401341] device bridge_slave_0 left promiscuous mode [ 260.407245] bridge0: port 1(bridge_slave_0) entered disabled state 17:53:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000480)="4685f8fd3e23a7b7b6d3d39d5f59f1ae0210c347eddcfe860fe1472b773ebede4d9b8d734eae30ec7634747a8c51dd9010fea712a2764a93d57620632558238a85137cca964af02fd4319ba2f880045fe585eafd49fc955553df9cab03479f770254c9456d633cc31dbf4b4b184019093198225801eff929d46ba8279cf21e630d69f0e504d831dc1f78b052b2de520ea8dfe7378b99eb4acc58ee445e59a2a0a8ce98a5a5737cf09b6f1577bd6aaa4a691f0d3b02670300000000") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x18, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, 0x1, 0x4, 0x7369, 0x80, 0x9, 0x280}) 17:53:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500000000000000000000000000000000001400080076657468305f746f5f687372"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:53:40 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="03", 0x1}], 0x1, &(0x7f0000000500)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 260.584457] bridge1: port 1(bridge_slave_0) entered blocking state [ 260.614992] bridge1: port 1(bridge_slave_0) entered disabled state [ 260.656498] device bridge_slave_0 entered promiscuous mode [ 260.670701] bridge1: port 1(bridge_slave_0) entered blocking state [ 260.677083] bridge1: port 1(bridge_slave_0) entered forwarding state 17:53:40 executing program 1: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x811000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x350, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x9, 0x7, 0x7, 0x8, {0x4e23, 0x4e24, [0x9, 0x8, 0x8000, 0x8001], [0x38dd2507, 0x9, 0x9, 0x6], 0x0, [0x9, 0x3]}, 0x3e16, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "5b37b0e560397af34562f232315dad746bd800d301d4011b227007a6e831673b0356da58fb3c5735357cb7308f7e521e428aa125beb25b7049408b29aa2306d1257609752ca587b40e24bad5fefe5f342d6e87dc4290ded178be8c116fd52fe636"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "35958dcec8907783155e019832b9e9e64439601a76c80ed5d83bd799aa000e1f93de6e5672cd18"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "2725f2c85df71bf329397853be443d41a501585f3abb11691f19c6787fddebde6e646a1523aeb5b6e70cfc4bd26d74734a56f69d72a2fb7a51acfc4550898f03eadbd443e9226416db3f51400db867ded0a33524dab646d13661e7ca20c57e40c0796fc257c03cd3d0e3fe2de8a7bfc7ee9fbff4f2b6e9c5ff6894c151731b14c75961ddf912024fc443903d1f4eee4a058c4516a21e096a66eb233549446a1063c0f6d5f482c771d6ef5db3ee9bdb060d1a82f1e2a6795627653a3fc535fe74b5acaa79c5b60a9338a98f"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "7afd4c3fa50e2660c294a5120c1a9c3fc6a40d6750134a97e920dcda8b18d6b06e1af2db414cbda0eb7174e171dabf23826828880047ab3553cd109abc7854363ec47898d6d0a4b51c12cc4e6de72b15dba7fdf51c250a83f5a231377d373a5c0bf881e8b0ec9e"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "c864ed473dca11b69d5c6727c5fc544b2140a96c57fe1f16104d8be94b8b51890310fb25b1719921ef7bda1b9561bcf76d8259ea255ebf367f440413de28ddd0d4096c4fcc26899290b1b5998d29b09e1d7f5f00c2b300e3123a0361b0e3bd260d1d9416660a999503a3084cec4739e5a4d2eacd5ba80e397af797051ced869c80d6b9a5f1ec947c772f5fd2c79577761b5fad2fa0f0dbb8e93bf1e61efac99488322068961fbd464bf657c8fd97fcec6416d896fcd9891f81a2c8ea0763667cb0d7890bde6433676bf6e1a7bc96eaebe60664ab37764c43d645aa9488fa7f2198bae514103c3624e83f7ae40348c79bedf28a3c103d"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "0b0033cfaff024"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "b5ad802b36c9cba0c9730dda1b3868296b7542b5a6975f1749659c34b5f53a093987043c09cf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001500)=[{&(0x7f0000001540)="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", 0xa7}, {&(0x7f00000002c0)="51b717657d4851249f8cd288d35064be23343b7bb240e456ed72590f90eb7ece42b192cde9a626f01da65a58ab2eec23a8d7e719d00f84440cd28538369ae60c1913f35ddd1ab02ea9f51ce93bef9c0ff0c774", 0x53}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000400)="add77c2f75e48985bba54ee75fe1fbba172bf14d8ae76177e14aded2263f9d2dfa3545c961bc82205dc4fcc2bbb2db836758ded28896452e724eaf14b393f58bbc433bfcba2b5dddc8be380a008bc794f5cd74222b0738343d89b91bf39b199621b0ae272a590aabd3561237e31c3d00edb59760a35dbff84bab3e2751c2b31fdb20154a96f9f8df564855b0abe01629111a051fc7b7ed3047747c89fceee0250d32ca4f6846f10819639c8b2b00"/187, 0xffffff6b}], 0x4, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000180)={0x3, 0x7}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000000), 0xb, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 17:53:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x300, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) [ 260.730292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "0300"}, 0x6) 17:53:40 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000015000708000000d02310a000020000001f00000004000100050012000400ff7e", 0x24}], 0x1}, 0x0) [ 260.841266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.873157] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.912588] xt_CONNSECMARK: invalid mode: 0 17:53:40 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) 17:53:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a7900df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{}, "9f5be2dbac7120c4", "a694269c02a54faf22a2050b23d624a91d824f78c75a2957e7d77dc42389af1d", "54374512", "51652095ed3e731e"}, 0x38) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000239, 0x0, 0x0) [ 260.935759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:53:40 executing program 1: r0 = socket(0x100000000011, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000280)={0x107c, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1068, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a74766b6af2f32235521715152a135021788dc755814ad04eace5b53e208ccce2e36"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x14, 0x3, "e72c30c5d1182445a45e19bf3f329b6f"}]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x148, r3, 0xa, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff99b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x801) unshare(0x40000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x803e, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x4453, 0x1, 0x2, 0x1, 0x5, [{0x80, 0x8, 0x8, [], 0x8}, {0xffff, 0x9, 0x7, [], 0x4}, {0x80000000, 0x200, 0x6, [], 0x680}, {0x62f9, 0x0, 0x4, [], 0x880}, {0xf2, 0x800000000000, 0x10001, [], 0x40e}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x48141, 0x0) 17:53:40 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffe, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 17:53:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03affff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x111) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240), &(0x7f00000002c0)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 261.139548] IPVS: ftp: loaded support on port[0] = 21 [ 261.142166] audit: type=1804 audit(1599328420.745:54): pid=10799 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/69/cgroup.controllers" dev="sda1" ino=16062 res=1 17:53:40 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @empty}}, 0x1e) 17:53:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x128, 0x128, 0x3, 0x128, 0x128, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'batadv_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) [ 261.395925] xt_l2tp: missing protocol rule (udp|l2tpip) 17:53:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 261.501631] IPVS: ftp: loaded support on port[0] = 21 17:53:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 17:53:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) 17:53:41 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000001c0)=0xffff, 0x4) 17:53:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 17:53:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) close(r0) 17:53:41 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="ff838e29ef1eaa"], 0x4}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) [ 261.852809] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.859716] bridge0: port 1(bridge_slave_0) entered disabled state 17:53:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x46}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x800, 0x3}, 0xe) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) [ 261.935693] device bridge0 entered promiscuous mode [ 261.964193] IPVS: ftp: loaded support on port[0] = 21 17:53:41 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 17:53:41 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x0, 0x0, 0x0, {0xc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSETELEM={0x12c0, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x127c, 0x3, 0x0, 0x1, [{0x1278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "ad538ea794"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x1001, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x69, 0x1, "1e95bd8987ff585a1357c7b3d5387dccfbdb227d80d4e7b6c7c31c9d4223bc2036f90f81b7c0e898b66e897bd12f90b01b5802fbb902b705893de240b34643fdf46b9dd84020c384283ac4fe45f88fc70be3ad211634a09a8c0dc5f50ba62de8223ba48c0b"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "bc027b63ad7cf41d13572bdafecd1d0ab4d8cf0391037b6f6c5f798132"}]}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "ac2ca217837d54f1f00fa5cc19abffa499c612a3d98b83d6fdbefbab6f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "bee641671464a88082554b99032936d1fa9633cbb01092fdd724319c91356ffb79cf53cca1417bc2780e8d104986c2d96a46337f42c7e28292a8f2831e3e9a7da144a9af4336939e9222bc58f7776280266b29beb25c4290de437013511e91f84f7d582c23b0f90554692ec3913842645c9097420136d7bd941816536f352d050453f59de6af8c212268d133b9ec99a38533cf01c22ea056db374024ba"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}]}]}]}], {0x14}}, 0x1320}}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0xa, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)="69f6b7fb77bf9b5fbab1ff8fd76288147bc6d66bbe7f5303c3b309415bf7aa59b8f310a94fda93131d38cbc916eef9f8dab396829e8c831ee26e2c6f77eaa7b5f3ea77f7a4d56af6fa0223a4b8ab07fe38746ebf139c733647a2cc6544d7f9237d9330fc8f95de9a8bf8e00cba0f5cfb51fd6cbc74385ec45c38c7c339c2b83c122fe84c59210dc2dfb1eae9948b1a8b8101d55f6bec89067115ce375a6e2dcabf1884c83fbfc88d", &(0x7f0000000300), 0x8001, r0}, 0x38) 17:53:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) 17:53:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03affff) sendfile(r1, r0, 0x0, 0x800000000000c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES16, @ANYRES64, @ANYBLOB="eea3ae5fcae12da0c4c185ee84882efd65c6cdde44455eab98cd03418bffd9defdc3dd228d1b67a3c9576b637be163486fedeb5158eec6553c0d5d275656c50e279ec0be4a26774267bcffd90a7f134f6a1b9bc07b8dfa507f0f3d4b3f7f3d8e2e5eb251ea5c70525f", @ANYRESOCT], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x9, 0xfffffffd, 0x0, 0xf1, 0xb}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x8, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 17:53:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x70, 0x0, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) pipe(0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) socket$key(0xf, 0x3, 0x2) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x208e24b) sendto$inet(r3, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffed3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) [ 262.597058] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.612957] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.619403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.626215] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.632667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.737443] device bridge0 left promiscuous mode [ 262.744160] IPVS: ftp: loaded support on port[0] = 21 17:53:42 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast2}}}}}}, 0x0) [ 262.883432] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.889998] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.916688] device bridge0 entered promiscuous mode 17:53:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) 17:53:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48) sendto$inet6(r0, 0x0, 0x16, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000004c0)=@routing={0x0, 0x6, 0x0, 0x0, 0x0, [@private1, @loopback, @private0]}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='geneve1\x00', 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "66dad6d08a5f9e3c", "e9a3008dfacb1772eda43dcb7ee358547aaeec88934189655edc5ace54758056", "e765eefb", "290544acd70910b1"}, 0x38) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 17:53:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) 17:53:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587c04000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) [ 263.618441] audit: type=1804 audit(1599328423.215:55): pid=10987 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/64/cgroup.controllers" dev="sda1" ino=16077 res=1 17:53:45 executing program 1: socket$inet6(0xa, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x204, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b78fa47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7989}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fe5ccf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27c05f98}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43cc}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x728b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c39}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68c0361a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bee}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47494d50}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4177}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x782d7b5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ccc0f4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5845a58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5536d385}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63d5b6a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ec0d4ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cae7e7b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfea1d56}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2611679e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70fff244}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x524cee30}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x204}, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 17:53:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000280)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}}, 0x3a) 17:53:45 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 17:53:45 executing program 4: r0 = socket(0x15, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 17:53:45 executing program 3: socket(0x9, 0x3, 0xb5b) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x88, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 17:53:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_open_procfs$namespace(0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000400)="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", 0xfc, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) ioctl$int_out(r2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x300, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r5 = socket(0x2, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) recvfrom$phonet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4}) sendfile(r3, r1, 0x0, 0x100000001) 17:53:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 265.695918] audit: type=1800 audit(1599328425.295:56): pid=11031 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16090 res=0 17:53:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x384dc7ef, 0x271}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001340)='~', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) [ 265.801165] audit: type=1804 audit(1599328425.325:57): pid=11040 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/69/memory.events" dev="sda1" ino=16090 res=1 [ 265.861269] xt_TPROXY: Can be used only with -p tcp or -p udp 17:53:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x96, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @window={0x3, 0x3}, @timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x13, 0xf989, "751d72fb287602056a26ad74381b13"}, @timestamp={0x8, 0xa}, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x0, @rand_addr, 0x0, "cd7d5a"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) [ 265.917585] audit: type=1804 audit(1599328425.325:58): pid=11031 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/69/memory.events" dev="sda1" ino=16090 res=1 [ 266.050053] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:53:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000e, 0x40000000000a132, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000080), &(0x7f0000002600)=0x4) 17:53:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40086607, &(0x7f0000000180)) 17:53:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004afa2655cc96268e1a240bfd9283d32c38ecdcb", 0x33}, {&(0x7f0000000100)="2239c9cae561fdf5dd163ef3245fc0fa", 0x10}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) 17:53:46 executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x6902, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:53:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000024000535d25a80648c63940d0624fc60040002400a000300091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:53:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xc9, 0x0, 0x0) 17:53:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) 17:53:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x6, 0x0, 0x0) 17:53:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wg0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbd000000db1c00010000000000006d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'dummy0\x00', {0x1}, 0x6}) 17:53:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x727, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 17:53:46 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000040)="a80e14102d295ef30254ca7843f70f2d668f3a80e5bebd1b1fd23290becc2dbf"}) 17:53:46 executing program 0: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000090600000000000000000600000000000500010007000000100007800c000180170001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002400010f00000000000a1400000011000200000000000000f1ffffff"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 17:53:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x2000}, &(0x7f0000000040)=0xfffffe84) 17:53:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:53:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a42, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000060017, 0x500001c) [ 267.191837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:53:46 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000380)={0x7, 'geneve0\x00', {0x9}, 0x800}) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x5}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001080)={r4}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="0700020006000800aadc580d52fea9b340c1f3a67ef1c6929a365aaccdccdafd4cd9b38fa6cbd1d320fde717b5485969ef9af55aee64a9fcb263c69358db12f4334b4d7cbe"], &(0x7f0000000400)=0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000440)={r5, 0x3ff, 0x1}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x2, 0x0, 0x81, 0xfffd, 0x3}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f0000000140)=""/141, &(0x7f0000000100)=0x8d) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x21}, @mcast1, @mcast1, 0x88c, 0x8, 0x9, 0x500, 0x3, 0x80088, r7}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r8, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) setsockopt$inet6_buf(r8, 0x29, 0x2f, &(0x7f0000000200)="8454e247b1bfa7071d35a05808a7daef07aee28a053777056f831c3f9853fd772748ea6b6e7b3f289ca0422fbd07f89678318999649f1b6de6d4beb48264406c098585593569dcc657cb47634e36d76bf9905ae0d42be669b127a4263b4809d19f37ef7b508126caf2a9cfef7ec6b8677f98df6954a60b43417d0908e523a9016703d838389c917c3a72f9e8189632e40b704582177f613c14177e3e1732f603e9c71130e9efcf118c66a20d19fc80d437c8daf616bb6d0304a25271892507ce1d98ece8b60a60e77757a9a8f398689e3468a2c15362a22d703d2c0536a49d19bdaa604e770482ea61ac2315e2d500"/251, 0xfb) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe3b, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f14fe01b2a4a290930206040000001301020b04123900090035000c080100000019000b40060c1101020022dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f0000000040)="73005000d612110000ffffa888", 0xd}], 0x2}, 0x0) 17:53:46 executing program 4: r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 267.243268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.253964] audit: type=1800 audit(1599328426.845:59): pid=11133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16097 res=0 [ 267.312705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:53:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x111c, 0x12, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@generic="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", @typed={0x8c, 0x0, 0x0, 0x0, @binary="34accde32f81613ea1f6f9840c82e549163c69cc7b24b6f886cf4ccd4b6d85213b7b190fd900d1bcdba69083bf25e307769d101373ac673341aa3f1d94d78eef3295efeb973853fe50b2fccb4a2705901d2b52b8e8122c7cd444e82d30f03772b287a7a069a098851175b710f1e01bc982351d31153f7f8a3d948cd42811098bdb64f6c71179fd27"}, @generic="176112a2baaf11c946b290c58fd50d644e8f5c44d0f8b7fc61b7c3922a4c08675e38edbfa6751e14da5a47118d1e4eb4ee4270e95b2bed2ad132796a7a055617f3a408116e7a685fc86de9f177baf5f19c6ecfd106b9e3f4aa64ea3fb4320ec1c945246b1bfb636487be61ca796c3b6f9e264286eb", @nested={0x4}]}, 0x111c}}, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000007dae35c1c32e76094a154d6bbd5bea3848e61674a3fcdd87123b7ece7b9f5ed7da63e55a2fc45f8af661c7020c1e7ac114584675293b2e1cb3465ee9c01dc4715fb3a455bbd9878425e1620854486d8ee9820db2e242bd3f48b796f32bc802d573f60786b892a6c1d44851fb4401f6434553697b71d19092f7d0e73e1b253f2a2cc00405aada5ed547aa1f5076f41a488e58a74721b6a05ff02649e976f09a32e3791399ac9c4109c511fc873430422f3aa7bc1776a0d1ea359b0a5373aaa06de5df1fc219bbc5f5c534308e4081345bb566270ee368924e1be7", @ANYRES16=r3, @ANYBLOB="00002bbd7000000000000a000000080004000c040000040003801800028014000100ff0200000000000000000000000000010c00018008000900000000000800050000feffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0xa00, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0x5) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x4c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x47}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) [ 267.348202] audit: type=1804 audit(1599328426.885:60): pid=11133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/70/memory.events" dev="sda1" ino=16097 res=1 [ 267.424326] audit: type=1800 audit(1599328426.895:61): pid=11133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16097 res=0 17:53:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000010001a800c000a390000000000000000d77f344b6fa4546a49b14561fd15c10774191ac3adb7ffcf05dbccddeecd793a1b543be842a89de6fc12e68dac7658a1d238199d061b8f54c8b0a8cb3f9ef35ec800c59784ca3d870480f1978e5fd9017a573c33d335d8d57e66baa534400fee82b6904f1547d563e2f39cd7c85477a1f856e2837409e4f7c2f983fc24fc57606b8acffc7cf36407eb4264bd30280ecca9ef5b05d0bae2"], 0x30}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 267.529423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:53:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r2 = accept(r1, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x50}}, 0x2000c005) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) bind$isdn(r2, &(0x7f0000000300)={0x22, 0x3, 0x4, 0xa6, 0x1}, 0x6) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x800, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00j\x00\x00\x00\x00\x00\b\x00i'], 0x5}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x200}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x2c}}, 0x40814) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0xbc8}}]}, 0x34}}, 0x0) [ 267.656170] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready [ 267.705417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.765316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.775966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:53:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x6}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0) r2 = socket(0x9, 0x6, 0x7) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009041e11000000ff020000000200000800040003000000", 0x79) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x18, 0x0, 0x400100]}, 0x2c) r4 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r4, 0x107, 0x13, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) socketpair(0x25, 0x5, 0x98c5, &(0x7f0000004680)) 17:53:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) socket(0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendfile(r2, r0, 0x0, 0x4000002) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 17:53:47 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:53:47 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000050060000000f000000001d6b15047b0000010049c86583000900020073797a30"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948ff8000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) [ 267.819869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:53:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 267.983915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11205 comm=syz-executor.5 17:53:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400), 0x1}, 0x20) 17:53:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 268.028652] audit: type=1804 audit(1599328427.625:62): pid=11200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/74/cgroup.controllers" dev="sda1" ino=16044 res=1 [ 268.082983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11213 comm=syz-executor.5 17:53:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "accf205301000102", "f3f4c9f2262c2e1532b2383c26b0c1e668113c384dd48c9904245bebf99cd757", "0a178d79", "28e694ad17ad6ba9"}, 0x38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="fd", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='>', 0x2f80, 0x8000, 0x0, 0x0) 17:53:47 executing program 0: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r1, 0xef8c987201b6e653, 0x0, 0x0, {0x3a}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffffa}}]}, 0x44}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x103101, 0x0) r3 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r3, &(0x7f0000003400)=[{{&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r3}) connect$rds(r4, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x1}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @dev={[], 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) [ 268.229039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11223 comm=syz-executor.5 [ 268.255978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11228 comm=syz-executor.5 [ 268.334319] audit: type=1804 audit(1599328427.935:63): pid=11210 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/74/cgroup.controllers" dev="sda1" ino=16044 res=1 17:53:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x3ac60, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000026002908000000000000000004000000110011002f"], 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket(0x400000010, 0x3, 0x0) write(r1, &(0x7f00000006c0)="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", 0xfc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x2c}}, 0x0) 17:53:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1200}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:53:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xa, 0x1, 0x7, 0x4}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, &(0x7f0000000180), 0x0}, 0x20) [ 268.471614] audit: type=1804 audit(1599328427.935:64): pid=11200 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/74/cgroup.controllers" dev="sda1" ino=16044 res=1 17:53:48 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x6100, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x3}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x2b, 0x0, 0x1, 0x10, 0x0, 0x180}, 0x70) [ 268.555277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 268.661793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 17:53:48 executing program 4: socket$kcm(0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r0, 0x427, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 17:53:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x123001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x107}) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@broadcast, @current}, {@random, @current}}}, 0x28) 17:53:48 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000001900)=0x18) 17:53:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff00159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:53:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 17:53:48 executing program 3: pipe(&(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}}, 0x40000) 17:53:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000240)={'bond0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 17:53:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000)='$', &(0x7f0000000200)=""/160}, 0x20) 17:53:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0xfffffffb, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x48}}, 0x0) 17:53:48 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x8}}}}}, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000400000000001804000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000a74235951be70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095f379809ea0d0815215159132000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6599200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da7728b2a10f85275591dc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094370000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000067a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000"]}, 0x9c0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) 17:53:48 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000040)="a09a929a77", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 17:53:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000140)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 17:53:49 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) close(r0) [ 269.570820] IPVS: ftp: loaded support on port[0] = 21 17:53:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d42269fa4e00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 17:53:49 executing program 4: r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x73, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000200)=0x90) 17:53:49 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @random="00000a5b1f00", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}}}}}, 0x0) 17:53:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000006061ae6e00146c00fc020000000000000000000000000000ff020000000000000000000000000001"], 0x46) 17:53:49 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x8100, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @local, @broadcast}}}}}, 0x0) [ 270.153305] IPVS: ftp: loaded support on port[0] = 21 17:53:49 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0xb8a2, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x40) 17:53:49 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x4, [@empty, @loopback]}]}}}], 0x20}}], 0x2, 0x0) 17:53:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x44001) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4000000043) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x9c) [ 270.266244] audit: type=1804 audit(1599328429.866:65): pid=11380 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/78/cgroup.controllers" dev="sda1" ino=16112 res=1 17:53:49 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:53:50 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) [ 270.387584] audit: type=1804 audit(1599328429.866:66): pid=11380 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/78/cgroup.controllers" dev="sda1" ino=16112 res=1 17:53:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000009", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="06170000000000000000160000001400018010a5460f6e16c51cfc2a465261f7af741e0001006574683a69705f7674693000b465083a561421c27cb8f5f5070b39b8d0c62c071750b8b205a4efbae351dc2883149993aa0b9ef19f7dd093d32814f1a82bef7d709617f42c65401bf3ca9fc44dc846cbc4a1cbcea88d9a788b959274df9aa3f12c046dbc6826d0ed18b448830024c67f01a303156bedeb2ea21a9831ec2efd88dad8f95211eeecd8fbb1430f0b0fd96c5d685453c5e9fd737ed6d26f61cda725d5b4d161ec"], 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001540), &(0x7f00000015c0)=0x68) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0xb}], 0x18}], 0x146, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r5, 0x1707, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}]}, 0x28}}, 0x0) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/213, 0xd5}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/137, 0x89}], 0x3, &(0x7f0000001400)=""/232, 0xe8}, 0x122) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x4, 0x1, 0x2}, &(0x7f0000000040)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r7, 0x1707, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0xffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 17:53:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0xa0}}, 0x0) 17:53:51 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:53:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x310, 0x148, 0x0, 0x484c, 0x9003, 0x5, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 17:53:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) 17:53:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xfffffffd}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:53:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 17:53:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) [ 271.709056] xt_nfacct: accounting object `syz0' does not exists 17:53:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1, 0xffff0f00}]}]}}, &(0x7f0000004600)=""/200, 0x32, 0xc8, 0x8}, 0x20) 17:53:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x144, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) 17:53:51 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x54) 17:53:51 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 17:53:51 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffc}, {0x80000006}]}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 271.902794] IPVS: ftp: loaded support on port[0] = 21 17:53:51 executing program 2: listen(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 17:53:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 17:53:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000900), 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) 17:53:52 executing program 2: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x8001, 0x31, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) [ 272.786229] IPVS: ftp: loaded support on port[0] = 21 17:53:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, 'cgroup.controllers\x00'}]}, 0x33) pipe(&(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000080)={0x10000}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x4f0, 0x110, 0x0, 0x110, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'gretap0\x00', {}, {}, 0x0, 0x245ec4950a8d8fa6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @broadcast}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:restorecond_var_run_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x540) read(r4, &(0x7f0000000040)=""/48, 0x30) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) 17:53:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x25f) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x3, &(0x7f0000000580)="638b79bd79246d3dca11676f89e539b1", 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) socket$inet6(0xa, 0x2, 0xcf7b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0) 17:53:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000000c0)={0x9, 0x0, 0x2, 0x8707}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r6, &(0x7f0000000100), 0x492492492492711, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) 17:53:52 executing program 0: r0 = socket(0x18, 0x0, 0x2) connect$packet(r0, 0x0, 0x0) 17:53:52 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 17:53:52 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)='3Ly', &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r0, 0x0, 0x746000}, 0x20) 17:53:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e23, @remote}, 0x64) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r1 = socket(0x1a, 0x5, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xabc8345148f925d4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', r6}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x7b, &(0x7f0000000340)={@random="1189d33b9e6b", @broadcast, @void, {@mpls_uc={0x8847, {[{0x1f}, {0x4, 0x0, 0x1}, {0xfffbf, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0x4, 0x0, 0x1}], @llc={@llc={0xaa, 0x42, "c9ee", "cb6896d977605e6388905b6d8f4ffe670042aea24ce533c8ba457e04b1b835f354ed42c22f8608a4d70d8a600f790907f03b680b000665a1ac759d3d5335d67aee7c3ea8e55730e74461f30e9859ce866e"}}}}}}, &(0x7f0000000280)={0x1, 0x1, [0xb00, 0x859, 0xfc7, 0x431]}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000098}, 0x6040) 17:53:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x0, 0x400}, 0x40) [ 273.266872] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 273.388778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:53 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) 17:53:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 273.441514] bond1: Enslaving bridge2 as a backup interface with an up link [ 273.572355] bond1: Enslaving bridge3 as a backup interface with a down link 17:53:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x470, 0x30, 0x1, 0x0, 0x0, {}, [{0x45c, 0x1, [@m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffff, 0x10000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10]}]]}, {0x4}}}]}]}, 0x470}}, 0x0) [ 273.616700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.675912] bond1 (unregistering): Releasing backup interface bridge2 17:53:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x48, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x17, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}}, 0x0) 17:53:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@tclass={{0x14, 0x29, 0x1600bd75}}], 0x18}}], 0x2, 0x0) [ 274.096016] bond1 (unregistering): Releasing backup interface bridge3 [ 274.123637] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 274.145408] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 274.446902] bond1 (unregistering): Released all slaves [ 274.489610] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 274.498799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x18) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r1, 0x7, 0x0, 0x5}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') 17:53:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0x13c}}, 0x0) 17:53:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 17:53:54 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000000000000000800010040000000", 0x24) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r4, 0x2, 0x7, 0xffffffff}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0100007e1db5ad02417994aa834a2c"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) 17:53:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @remote}, 0x10) 17:53:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 274.721824] IPVS: ftp: loaded support on port[0] = 21 [ 274.748674] bridge1: port 1(bond0) entered blocking state [ 274.750445] IPVS: ftp: loaded support on port[0] = 21 17:53:54 executing program 5: r0 = socket(0xa, 0x3, 0x2) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x20) 17:53:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000180)=0xbcf, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 274.794510] bridge1: port 1(bond0) entered disabled state [ 274.869435] device bond_slave_0 entered promiscuous mode [ 274.875303] device bond_slave_1 entered promiscuous mode [ 274.948635] device bridge1 entered promiscuous mode [ 274.954413] device bond0 entered promiscuous mode [ 274.972298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:53:54 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000142, 0x0) [ 275.006827] device bridge1 left promiscuous mode [ 275.012245] device bond0 left promiscuous mode 17:53:54 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x20b}, 0x14) [ 275.163839] device bridge1 entered promiscuous mode [ 275.169072] device bond0 entered promiscuous mode 17:53:54 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in6=@empty}, 0x0, @in6=@empty}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = socket$inet(0x10, 0x2, 0x4000000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001300ff09fffd06000000b700592a948200000000000068354015002400050000002e80b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) poll(0x0, 0x0, 0x0) [ 275.220010] device bridge1 left promiscuous mode [ 275.261556] device bond0 left promiscuous mode 17:53:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x7f, 0x3, 0x5, 0x1}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x9, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{0x18, 0x5}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 275.510072] IPVS: ftp: loaded support on port[0] = 21 [ 275.834463] IPVS: ftp: loaded support on port[0] = 21 17:53:55 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000600020423dcffdf00", 0x1f) 17:53:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) 17:53:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x11) 17:53:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x7, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000004600)=""/210, 0x31, 0xd2, 0x8}, 0x20) 17:53:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000004040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000280)="33c7054d28b22ffde6796ba8d79a48409baa0c50aae286501d36c4227283acab6f55613c62efb71895b7a70dabe8380dd38910499455d7a3f346fd3194dbbb8c8e97ab474921d654d855b72556bcf8d6ee9f694421a856882ac34a62113edd61e646a0bd47ea85580594b857939ec51e1795efcfcb9a1b13e2ca5f219dfc51e6515a8afe", 0x84}, {&(0x7f0000000380)="53f9eaa72809", 0x6}, {&(0x7f0000001480)="be83d88a272fe24938cc27fb8c221ccae6d3a389253f560d2abd21cb4d8f5be29e625d2c40ed0a7549b9e1aec46e9fba130bd4e5c20fe1cffa0b34bff01beec0d80ed40537174052435857cb0ae5bdda2bba1874797b686cc1f91e474b73a9c42ad20e649b49f4ede9510ab219ed9cfe42c14fadcaef2f86e51b84d10f921e3f0af1473866a14540a7", 0x89}, {&(0x7f00000003c0)="dd025e9d492ad0c07d6c4d5fad11da7503835f9f0be231118c8d50deb011a3c7c5cc7d41dc1c438a6f39950f917806a5b0f259b0c0c38982360c5548c6a2235ef4234a3fc9fcb6604f00a0c6ac0839f1b0a57e61a40b1018d8488546d9dbaccc5eff17", 0x63}, {&(0x7f0000001540)="36ce17950e6fd0f79be45ee610abfee967974715c0c26e537f1db5f6e5b71bb071c4fbcb13acdcebe4fdcbbcf70f401651b48e190c5b0981dcd4c720029a8e1211e669b29412a068026f707806c095f92b185bd7195e5cb51effb7fea82abc5bceeb3200abc589f1c18ef5cd23f52c9d05785edc4657d7dab34933f26af93ef056cff17f1486078512fcfd126a7b2ecbda778852e42c7fbaf8d5c3813785e61567d2699f37d8490adfba141abd47e26f4ecccaea557ad07e5beefc3dde", 0xbd}], 0x6, &(0x7f0000001680)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3d, "d2a5c382d3697ab52995aff3a050f7768c77c511b13466093bc2324bfbf83d63e5ead64c6042d550befd702aab745c50eeb7064873088f611afd81e957"}, @assoc={0x18, 0x117, 0x4, 0x400}, @iv={0x108, 0x117, 0x2, 0xee, "3902b5ce2930c01a739f43a930b0b91e6998172579d5d9adccd35784f5936d52533e6f264ef63ca91edd55e1d3989f147212f0c1d86f728c3f1a307de1dd8085c577dcff8aa06bc25f581a1ff7aeae612a134803dd27dd0d8866ae94e5f61b154ae491b0ed4eb012980ac9d0272ab7b4e97014f8a500d88ed5085b9c1c97bcfbf55e3fe933d76b9ccc7d8602b09c876921de37b37ae8f1b2411093bb1a9ee9a9f27a30a1d6ea9fd1f4e902fbe3c74733561773eec6a761a60209354d55a0a8e8453097b54726b2347b8094f4704cc399009b441a8003326e37817ebefe78527aa6b1d7a29528fd57daad0fba96ca"}, @iv={0x50, 0x117, 0x2, 0x35, "fecfd7e62e2fd4fc5cd1e917d501596e122ba048ae2432d8e90667687604b9fecb7bbc73d92219ca3362cc2b67bd0e66303b3b836d"}, @assoc={0x18, 0x117, 0x4, 0x100}, @iv={0x28, 0x117, 0x2, 0xe, "180047a817fe9bba0ac2e966faab"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1250, 0x4c800}, {0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002900)="6063820f8262fdc8508db90082cdc75a31f08c85fe2e4f91bb71685dfce8ea75bf673b25688a1bf1beff01a12441f0b444bbec22456e428526efbd4aa1a2e64435e9a9209e3931650f97de9c466027bbce61c8d7fe7a6de21ab3f4f77cb7e5a8ae4ba1a972d940b6ac647b3a387fe4b065a041887e412ee5a06515354437a61a3266cf76b2d36dfa67ac76d7f55041d1dd678a0e66339fc3818867827f3e1c8d5d", 0xa1}, {&(0x7f00000029c0)="a53d808d7b6ddb73130b869e7a5f7f74fc172a823ddaf517fe216f5c7b2195c2b353cf788d08a981bda5674dade8c42ba0eb09b333686ad0836801f0e07aeb2fc7c538bbb8ee3a1a6c3c35199769b9e633911e3b84edceb3c10ffac84ff540e2299300ab56521a8695a862902beb371c8be90a0d5e461d1f783ab0efc8c85032fa907a188b5bc57c1d617a724bf126ee5d543c4034b2ab6313448c1f615186c328e02dac4f0daf8fd5a51eeb97ca371ca540431a3beeea0e358150a7a1ddafeac8342257d4d868b1ee52f00cfbc565c87e7e13bc5d3b71a6dbda8216e354ef9da981b6f4ad93facc23da761cc0caf1a94eb8af42330f1963c6eb1e51196379f5a68f1d2ab64defd8a9b78ec3e02d00f1b6027e417382892a8d27bb3e4115d60daa2b118f3326b147a4250d63dab1068bd9d92411b1f25a7b0be6a5a387427dc8ea7227673ee9d571b8f32bbca77c2f1faa61d9c67d921b9c92c7189791d3ce33ca53330f9be1e661c9548ef2c005b059eae6b8da858dab4f761b4b61b056c8cb380f141250bc46ec9e556e945b76442f52b070542e061d2b5b1144b904eb8b2567635708522c58da6711cefdb32b31f82ecd146e03bac37799dc477e4f19d9ba7ea20994a8f4ee6ddbfddc82982d62ae1918c6dec83c366499d9c8b07436ebcd529a70d1bb5fdc96e7cb8ec7d2cf76350beb07dce46bde9c6e091fac0569eb90e2801ebfd912ab60c4eda6ecb2e13b7870147237deaa446b8f8e5f3c0e82d772cbf7b82aa5eebcc1a972d720df829d554fd911b2f4495cf57f4b3f40c9a928b95f46d38cbe27ca4fcc4cb7820a1250e4fc8a35a9efa56b55afd48089e424d6d55d2aee543358062ea7196593f61148cb4bf4d571e990f8e58339b0091355c763adba5f45e32e0f69f5dd68f849758169b642c3477bbb8dca54a0454f0f47a60bf48b6c284369208a68912adc23bdd2bfb6869edbf620df19ea62da1df2f30e5a8b2f796bc01e405820fc6c726a863665a489af67dac51466a78ceca44ae95f5d3e933051398db953c6134b13a19b2548218edaa48366c2f0da74eaef1859929f15389756ea93fbb3428df4b6763d8691d1269b59adc420e1e2159547c962cb03ac936b4610465b33be7f9b5b02744a55f1deb416661795989c2b89ba75ce1f46d605cebf45ef157fcff568000bbb5376720e89069bd78b913aea9ed1e68407f77419b4ebf6de7e140c3d9760b6e4158dd7db6c62d6bc8394566358a7a8cd1ff2f65d8309979ad89d0a909d8aba1ae0a13cd2cb11383daa1a509a80f03ac73e6cdbdeaa0230502c45bd805ceccb3f66506cce51e9bb5f05b3518128bcb0f2f19c13ea953abddc81a96e78549a22a24df941440afef96c6db7736b5d1dc933516f74b89c002321b2b2bc1620481b8f18b20eafe85f5757b915640bcd4fff2dc18cab79972cd0dc412a01a8719e1b4952c16c2aa69b10ad0b948f890b43d050f80533dabb434d9c32fcdebe972d742c10e41c7271348347abf50c86300f92ed419cf061b0707542ad7d632af35b8aeb032b32dee1b22b238b8488eea16e6af74c36f790cd621847384f7fe1d750b321fc780be65192953b4a0da36c7aa5e28d56e08590061250937e2c062d84372946226ecc08107753f49058e84ad16734e2d33fe8105e8a38038d7667081d8b028aab3af610879aa89ca6db193e0a4111a214c37b5b228542c18eadcdb7141fcdf8bd3d91e85b7fcbb5c204e31e8168f0ea06fab3a08aee2d08d56394dc63a7924b9c08b2380017bbb1ec075201662f90c19a0d3d7ad72bc878e121a68fe8f10dd2ed78134a558d4db0f62b8cdcc664922aa3ddf1e59667b951062c90fcfc76c907b59c8ee34195096102da88cb63e216d4894f784cc4abc13c9a7108589ad1abb735632bca0633d7383288f24e1a0bb51d8a1964c934cc4526d7cd117ca518abf0881d5d92e97b2739281a641428a0b37f25a90b772c61d8f16e088d3ec77c192de348bf39a66c29e62b1a588fe8f905498cf9739ac755666873604e504adc228759454e7117fa61c494c86005d9030f0a821f53aafc7e7926b1b319b09fc1252630eb9fe8bdf942c555e411255ebcedecebb39a14f2f31aa452cd9580a93c82d18c43cc7fb1c22bd72225fd15cc9e6fd0b777e65c3a3168e7f6aa88aeee326ef71207db8f63928ace2c33a2cf4b98e3ff6f0062a884126acf5a64a4e176e906df23e422fbe48fd427097997ee19c5a91b762a552ae365b7bc14bff1a9147e712f8697fe60ab1c037b52ff7cd6a89afe6c43e1ddc2f7d6101862343164ed365407def7430a64457a51bb67561dbf7668a4f5bbf818d63717593507d9fb429dcdc463411c7dabafa884e67b8fbd4e5a6a5bc9d4a96faa1bafd7648f454beb72e50974bfd7554cf279f1edfb4fefbfb4d46fbe50d61cd430429a1314a937568c250c828d05a43c91b9c333541f9356824f7c07b57ba6fa0e8cc1f25c12965c8702105ab7bbaa8c45e7aafc3b1766e7de1f561074532b09eac6b94e8a2d1ba0cf281a0aad886ef7e2ce0ec30fe892efffd483ba8d63fd14a654197bf9eab6ee1990a03c00e8bd274fc82dd33d83264a67d40ddad785ace91197a98b9e56fb96ac114524286256429e17a3c366c057d8a5400c3cc312d68b7494e59cf88e65c7b66debe4562b325045870743ef10f7c87f61f8e5d0ddd9721e97807d4c635394897d1d41849e39aedf991a33bdd33cdd58715713dc8de0296cec43f5eed42a8ff911a0bff59eafa38154e15f56de6057a08f7022d8880c22921951bfff78f4076aa55c8d1be2c098fb696bb47728d2d8090b4ab58e053206158227ccc193e71070af33c4c6ef221224f5b8dc4bebfa9062d18f09ce528300f3ae5a0a4a8c61430a66799c5fe66b256bae5b81ae90071eb0d9ab3a5e5784ec70087fc2dcc088541526046f5a7521f6576caafd8d1e4873db057c54d715dbb141f31bfa69be2d62cd386051a656376f15e8bacf88b3229a057cc8bd0b859c87aa850d4d4b15af89479c5214185276691643c0183fc8dafdaab5dcec46ffaf45ba14e16be8d187e1cf5e85dd07cbc1694646a0fa153a7d193da5f44896af819f659badd92566e8bb4f88f8ef123c39fc2ce83e4272c47cc58e6655819cb79686b499b71590bacb97aba86e6766e3ed519ce3d4b8151d386b700f9a188533b8f7af559e728e736a70a6cd6f8bd20bb0e2af9969a35c7ee2417bcb79076e36993ec2fc59482297d76d766b454ee1249e767ae59b56593a4b16187a24c9727cba9b6705c16f2ae6e69443bc5c3940039416a5343cd4e270160aa3922ebaea00702f83185e0610237ad076eb60331082a12098ecef5611cfa50b822349d5a4d25f2235ce3644fda453f2c320877645797c7f55b9491d36de05af5ecb57e07715671cbd2fbfb902f6b7f38e4bf2dcd50427ff0ee7e71fef0e1beeb5dc385c62b3b5d200f0d13e5011d1292a83ca1daaecf120b6095f149a7c3f8dfb5bc4bb01e8c8ae91118437d1d78c33327a4aacadcf08db0dbbdda62688824bf9a38d3e4540560ce81c60201c69b1c2e88d501fb6bee19891c9895c46ca51c3e2fde14b19b2341dcef28f5877870edb531b8b6ea61dda1a92a35caf2683ee78fde68e1ed7ed46318fcca49bcf4e42b6bb74073fac3214b504d2ba3997fdbff0a08e72ea3e7209aa99cd01fd67ca8186bad756f5aa0d1395243bf5aaf20ab3dda106f52e85938394cef3f63ae37313b071fbc0a8bb10f7cbd0904fe5d405c304cb6e5be6ceca66ed87d57b25ddbe321bd6633ab156980cbf88682d4cd84b6a93f80a9fcaf1b0b568f229e250dd1c70e826162ddfb29922cabbbbc05af173abd7a6f340d5a247749ca6c457aa2a490687294e6fdc0e7751dff15129c400acd536e80e6691ab5d15c2efef27c578ad6951a97e81950a06a99d528916755b9982ee68dcd5e7cf385e47343fa3aec32e86a04cdaedf38853af60050d35021df44c9c42a89d28263da38eb449b9ec6af21a9a206b4ef502c53fe2146484bab907b9b2c5568c8c73652ac30ba34548ac026d66be0f1a44f5ee54b84402705e7c4a0bfc5233dec52b434bd5917e831741ca772a48e754d7522409fe7a6a494f742e8a2b2a96c4332476ab5fd092ff7accbb9907c028a79be963e00b22c3a95d96f4c9d6ad041e24b2c6c890d7e76e3d70521ce07f593eaf4c93d04e54e280f3208227f20c6febd2b112bb5899f100befe45656ef82e69864f1fc6ca55efe18e8830f96552802ee7f276940f0eb00b2cbbb79f6381dbeb3b96d25c23aad70e16d3939b1f2ee2dae348bfd8aa8d24c767872dc3ac7232f980d3c158155093533d2b03bc82fc1096eedc500240728a4506d9a9277e168c544af72e18b14992f0e075ec3d133eaeaa933658d228ff7584a1236acaa1401676434b55febc8d94008c13fec650639f5b33f72a0b23abd35ae8e58a255f17dda285e2055edd79ed2daa9a30427410d7062cc4985699ca1e05189db7e445a031d67166382baf328bcc97778cab39953312e50ef30d79d923c11127177b84ad04f9c832c55ceccbcc916148242fbee67487c443d0289f414b1d6367343399edcd18a7e2a9dd8ce8e9d7d4c3c14a31dc53143750b50c4e9fd115bf4dbb4bcfc98c32847fff351d783cfde378254a986e21a5dceb4b3b4f4c8c28eb32447cc1355cc28d7d6b8a93654e7eb9da32046a9fb3089cc8475dffd9a83e7e87328be5d06ceda4662d30f3929c4e45b2aedf0f8d7c1e00a70df108a07057688ddf3ee791bf43b599e0f525b116ebe03ba559327e16fd457ca99c32fb3042c4bb999e122a5093e487a68b1130e0d577dc31266807b506c8c28693132733da989cb5cb63e05fcc08f2047b6afd4ed8bf205769aa9c2cbd49d690fc365377d3799ae5f26a49af7808d462ac527b4a823d5c3313ceb78bc9250c7d9bed6b4fe4d32bbf4e78a53b4bdae94dcea2098b9b9292f1605d2fb2003c1d8d08ae1fe863a4905cc90a5983eefe9a31c12f12492fabb31691f9d3e7b1e44b488f0c04e7796d369505caf1acd0f270bc9a9031cd80496e5a378931212f749f39c42485660c7dff3fa0fc99083958bb8e12b3eebb36c7ae8097de66fe53e01afb3d3ea49dc909fd521261eb78b7b4d304309ce0ae862bfc28fe6dca6ca38c75728a8349797d720dff51cb657896d006d4bfedc64f6e6dc8771b9b23c03f6f3589e6fd9b76e7af2003af3cf45cfffef6db37dda517134f85dac909118bf20360c42c7ae082f0fc29eaf8a9c11370089fd44c89cb5304e77761355609a5e36f32e0865726d63267c882922bac5a11ac2a6a5b14da98fa7e046e345e50ab6810723fe699c00fa339497737008f06236675493d3b39eb80db303c965e3e6c69fcf1a8ab9a53d35b57c22f9a3efdcdafe3aaa7355bd99648c1916653ec3e797114c3985bdbdc4f30e77ea1f3255649c9111d7dc6ac0d5d3acf3f49707c50ae408a0ec8ddb185047a8382fa4f616b9983d3e04f18b57ba281412f47eb80829155a3000e537d29099ab96f79ea33c98cf920f8ff06f0d1c83357a41169f17e6d155e1864d4989505cdf5a0535deb071165a69d657d7899eabb9a5e00133db9125ca70be8e4d84dfc80a02ec3c15bc954408ce356e9de90cc622ba1831c77bfbe59ecb23b0748ba0d18bf80167460a79d896b16bdf1b637fc4e0e98eeea9ae0b222d332be7d8247b5319734cfd115bd1db45a14eeaae4e899cec490b221d32d4c4ffaf7", 0x1000}], 0x2, &(0x7f0000003a00)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1f}], 0x48, 0x4}, {0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a80)="614594a0abbe6a7481e0dff9278a535a61923a656677e1c2d8deff23d85786e69f262ce5957102cb2c0854ca003facdabccff8effbb4af2e9914f323481c7dce1b6f5c1d9cf40fb8d63411dd2d5383c55f9a9f854aa9520813a7031c55f801995abc248c56dd463397450e02fab8c6d1ed2a17c353cbcc7c753832c4ea5bf280a1daa4221662f4b8ec7062feb570c62fab3c84c487d4287dc92d318cc76ce0b5ff6ed933570e3e702af34f82f0568f5fc17228ce97287be0379cb197", 0xbc}], 0x1, &(0x7f0000003b80)=[@iv={0x118, 0x117, 0x2, 0xfd, "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"}, @op={0x18, 0x117, 0x3, 0x1}], 0x130, 0x40000}, {0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003cc0)="a92471765476e8b80a6f2585e4f15287bb019342e91f1bfb347a3358a137e03d036b081ff956ca03377bcb001ba14089082ad78cb659fd7675f3f057214d0f5d3c640e9c2d1c4b26d4c723b8e15bcfafa6dca43ea1256a3d713eb4cbfc4d59eab0b4432d139543ce40dd5be30ddb79f6b56eb16e147336300d56aea37549aaa79b3c7c8e4f21d50f97475b871e", 0x8d}], 0x1, &(0x7f0000003dc0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x59, "3881fe2348dbaaf8c9d9981fdbf3b53e6ab0a929a4b0ec05aa444306fea2ec5dda8ed1d1c39d5d14ffa492bbd85176fce8646ae9e1badb3c4a422dd62d13d4507b5712b51e3814d07361de8304562029a03ff9d0b6f31a5ae7"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x86, "b6d6a2d3dc585e89a0e19353665972149c072e84c8938cb76aa1a57ad2243b55b88232f78558cabe4898c461abbf200e18953c72443b7607953a2d2bca4df17130a04a7a53a524dfd4ddad11a587780859ce513a1f9bc94cc8bb381df302aec10ce85f1178c7d9fc2a20ae6e17976bad6d6e09f11dce94eb2b3c7dc9393ecbab3168c5f96afc"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xe0, 0x117, 0x2, 0xc5, "81319d8b675dae49b5480433fa2c00db1ec77a2a1d318c3deec02ec8d777709111049394e6a3df78798f3752a06ee83687a6a9d713ef1f659ef564082dd9fc97660ede7e2f5de85a1db75cdadaba02b29b0e648a12ca756fa578630bbd9f5b2e2ed659577fe8f2d3a60c5336d4fe397108fd0b7c4737c73a04ebef4719c98a706db0791f2dd8f05859ec03b6e0436ed8e814e858245c8ea27d6cb6b446697fc131b13226eb4be18f78c2a6d9e19bf14b42d1ef37016d79bcc110983df626d964e085107989"}], 0x268}], 0x5, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:53:55 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX], 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 276.263519] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 17:53:55 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7f, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000140)) 17:53:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 17:53:55 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000e300000000090000001c0003800800010001000000080001005f00000008000300000000"], 0x30}}, 0x4040010) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x0, 'netdevsim0\x00', {0x1}, 0x5}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x3ffc}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000240)) socket$inet6(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x20848000, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="03dd07d4b4af62cdb5f9f663168672ce4afc550133eeed788ff84dfb432d001710c20a9b734e5574a440e9a91b754f0a99d1d30a120eac23b3177aa4cd6a2d4442006c553cb2bb1e8229306c1488349af452fb511b17a0be0fb38a33e3afac4614cb7c73fc3a77a536c526381df4df4d7d23b2fffb6d", 0x76, 0x20000805, 0x0, 0x0) [ 276.310399] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 17:53:56 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r7, 0x0, r5, 0x0, 0x400fffe, 0x0) write(r7, &(0x7f0000000180)="1c0000002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 276.402342] audit: type=1804 audit(1599328435.996:67): pid=11906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/85/memory.events" dev="sda1" ino=16127 res=1 17:53:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) shutdown(r0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) [ 276.471465] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 276.553058] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 276.582819] audit: type=1800 audit(1599328436.046:68): pid=11906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16127 res=0 17:53:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001000090468fe07002b00000001000a0026000000450001070300001419001a00120002000a0001000a0003000000000000000000", 0x38}, {&(0x7f0000000000)="8e", 0x1}], 0x2) getsockname(0xffffffffffffffff, 0x0, 0x0) [ 276.614205] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 276.641307] IPVS: ftp: loaded support on port[0] = 21 [ 276.674420] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 276.737462] audit: type=1804 audit(1599328436.046:69): pid=11910 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/85/memory.events" dev="sda1" ino=16127 res=1 [ 276.767742] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 276.820494] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 276.865379] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 276.904692] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 17:53:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) [ 276.926158] audit: type=1804 audit(1599328436.056:70): pid=11906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/85/memory.events" dev="sda1" ino=16127 res=1 [ 276.976592] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 17:53:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) [ 277.025316] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.118678] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.141944] audit: type=1804 audit(1599328436.156:71): pid=11906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/85/memory.events" dev="sda1" ino=16127 res=1 17:53:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x1, 0x5, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 17:53:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newqdisc={0x45c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfe, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}}]}, 0x45c}}, 0x0) [ 277.163924] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.259417] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.363088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.438985] sch_tbf: burst 0 is lower than device veth13 mtu (1514) ! 17:53:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f00000000c0)) 17:53:57 executing program 2: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x7400}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @local}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) socket$tipc(0x1e, 0x0, 0x0) 17:53:57 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000280)=0xb, 0x4) 17:53:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r6, &(0x7f0000000100), 0x492492492492711, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) 17:53:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000007000000000000000800080002", @ANYRES32=r2, @ANYBLOB="0000000000005ad4bb9f370000280010766574ff010000ecba8018e218a2bd522dfd1300ba56b5bc864572c8b618f8ce8dfc3d5e6e68d1718af60e9de8ddc8b17fd9079f74f946c99e8397d2a94df06896816193177f4a0a40046da01f000000000000000000000000ec8939640b4e9bfb47fa312a3eba236ee676753188e8f8ca48757f0c812c67dd093543b04110e67bece3837b150871f9a6a24551c1c2e8fb3a36121937e3d4f08e559183c7cf42ca6ac9dfed71a0023cdb847f69ab8e2b78df596422966ca4b8b67c9acffdb0a38152916b17c62effab07130e0ba5e236bd7dd63ea9d8584a91366c2149794ce78397e4ea4b3ecffd0a55c9e98fb3975ce77c5d0bbbbb6fb6c924932156a6d5fcf3c51d", @ANYBLOB, @ANYRES64=0x0], 0x5}}, 0x40) r3 = socket(0xb, 0xa, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x5, 0x6, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x54) getsockname$packet(r7, &(0x7f0000000240), &(0x7f0000000440)=0xf39d5e3a4e48cd2a) socket$nl_route(0x10, 0x3, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x7, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0x40, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000300)=0x54) getsockopt$inet_dccp_int(r10, 0x21, 0x6, &(0x7f0000000400), &(0x7f0000000480)=0x4) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x2}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) 17:53:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="2cae5780b9000229f43a000000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0xffffff8d, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="cda53a3c515c4a28c82b5de70842b90c95", 0xfd40}], 0x1}, 0x0) [ 277.620687] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 277.684944] IPVS: ftp: loaded support on port[0] = 21 [ 277.718871] audit: type=1804 audit(1599328437.306:72): pid=11983 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/87/cgroup.controllers" dev="sda1" ino=16149 res=1 [ 277.763104] bond1: Enslaving bridge1 as a backup interface with an up link [ 277.798417] device geneve2 entered promiscuous mode [ 277.850776] bond1: Enslaving bridge2 as a backup interface with a down link [ 278.582843] bond1 (unregistering): Releasing backup interface bridge1 [ 278.757207] bond1 (unregistering): Releasing backup interface bridge2 [ 278.857983] bond1 (unregistering): Released all slaves [ 278.875687] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 279.549294] Bluetooth: hci5: command 0x0405 tx timeout 17:53:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'ip_vti0\x00', r4, 0x0, 0x700, 0x3, 0x0, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @broadcast, {[@end, @ssrr={0x89, 0xfffffffffffffe5f, 0x7f, [@broadcast, @remote, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x94, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @loopback, @local, @multicast2, @broadcast, @local, @loopback]}, @timestamp_addr={0x44, 0x2c, 0x45, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@remote, 0x933}, {@broadcast, 0x8}, {@private=0xa010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}]}]}}}}}) sendmsg$can_raw(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, r7}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x29, 0x0, 0x0, 0x0, "6724c05c8be026d4ede17694e898402d285618f9111da9f30588120094af6dabd3528087d02fac0e2fdc53df14c07966027e2b60e59054e132a13ebc35a03614"}, 0x48}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000000) r8 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac1414330200000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 17:53:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001f70000e28c5339465718010528a0"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xfffffde6, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002bc0)={'syz0', "f77fbc7cc2efeb8e4f569525dbb7b6c4eac08274aaaae6ed95d002cd26ce58a4b57b8ec0d76a00af8fe256d382af361e49c62462422c6c2d0593be6460200af497bdf79c017ba8398482ad8a163e0cc02dcb068b9c5e61b7ef1e2a2151b33f90105945984e8d5b373d5dc20c3c4129f947f6121da0426961b6f9e843112db50a10e0bd9edbe6ee5203fea6fc3b8019163052247ad73dc1d3f710a83b8ed928db956c7d9cbfe29becc8076eb346bdf9004bf329d615cd07deb685b4b799c319213426eb0c600595"}, 0xcb) 17:53:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x0) 17:53:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7ff) write$tun(r1, &(0x7f0000000180)={@void, @val, @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}, 0x1e) 17:53:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x2c, r1, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}]}]}, 0x2c}}, 0x0) 17:53:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1c}, 0x8) 17:53:59 executing program 3: pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f000000a840)={r2, 0x4, 0x1ff}, 0x8) unshare(0x40000000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x8000, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)=ANY=[@ANYBLOB='P\x00:w', @ANYRES16=r5, @ANYBLOB="00042dbd7000fcdbdf25030000000500050000000000040004000800030000020000080003000180ffff080002000700000005000600080000000800020003000000080002000003"], 0x50}, 0x1, 0x0, 0x0, 0x80408c5}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 17:53:59 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r2, &(0x7f0000003240), 0x492492492492619, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'wg2\x00', 0x1}, 0x18) socket$inet(0x2, 0x3, 0x2) 17:53:59 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x38}}, 0x0) [ 279.951119] audit: type=1804 audit(1599328439.546:73): pid=12097 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/88/cgroup.controllers" dev="sda1" ino=16164 res=1 17:53:59 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003040)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x6c50a96ae300b3, 0x0) [ 280.012264] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 280.061216] IPVS: ftp: loaded support on port[0] = 21 [ 280.121155] device bond1 entered promiscuous mode [ 280.156568] bond1: making interface bridge4 the new active one [ 280.187088] device bridge4 entered promiscuous mode 17:53:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}}, 0x0) tee(r0, r1, 0x8, 0xa) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 280.214609] bond1: Enslaving bridge4 as an active interface with an up link 17:53:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x5, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001340)) 17:54:00 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 17:54:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) [ 280.567688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:00 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="240000001e0007041dfffd946f61050007", 0x11}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfcfa) splice(r0, 0x0, r2, 0x0, 0xa360, 0x0) 17:54:00 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) [ 280.688872] IPVS: ftp: loaded support on port[0] = 21 [ 280.778281] Dead loop on virtual device ip6_vti0, fix it urgently! 17:54:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x4c}}, 0x0) [ 280.865352] Dead loop on virtual device ip6_vti0, fix it urgently! 17:54:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x103}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="93fa7160fd1aabc95b206edf68f0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001500)='%', 0x0}, 0x40) 17:54:00 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000800)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 280.968522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.990454] syz-executor.5 (12210) used greatest stack depth: 23128 bytes left 17:54:00 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86, @fixed}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x0) 17:54:00 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x5c, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x180000}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "92af"}, @NL80211_ATTR_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1a, 0xac, "3aa355e35fa09edc8ba345912bb3c76f3fa36ab28d22"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000540), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0) [ 281.093502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:00 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0xfffffffffffffffd) 17:54:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x0) 17:54:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:54:01 executing program 2: unshare(0x2a000400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)={'syz0'}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) 17:54:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x110, 0x6, 0x0, &(0x7f0000000000)=0x3) 17:54:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0000000024000904000a", 0x11) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 17:54:01 executing program 4: unshare(0x40000000) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0302000000000000140012000c000100626f6e64"], 0x34}}, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13804}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x44}}, 0x0) 17:54:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x1402, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x8}, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001300074705bb65e1c3e4ffff0600000001000000560f00002500210019000400040000000759cb4aa1fd17e5ffff06060400000000", 0x39}], 0x1) 17:54:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x31}) r2 = accept4$netrom(r1, &(0x7f0000001440)={{0x3, @null}, [@null, @null, @default, @bcast, @netrom, @bcast, @bcast, @null]}, &(0x7f00000014c0)=0x48, 0x0) bind$netrom(r2, &(0x7f0000001500)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}, 0x48) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 17:54:01 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000100)={0x9, 'syz1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = epoll_create1(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x35, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0xffffffffffffffff, 0x9, 0x2}, 0x40) 17:54:01 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6f90}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 281.803050] IPVS: ftp: loaded support on port[0] = 21 [ 281.805957] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 281.825981] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 49 (only 16 groups) [ 281.881822] audit: type=1804 audit(1599328441.476:74): pid=12291 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/91/cgroup.controllers" dev="sda1" ino=16178 res=1 [ 282.379014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.432211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.513172] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 282.522765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.538080] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 282.577629] IPVS: ftp: loaded support on port[0] = 21 [ 282.582963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:54:02 executing program 5: bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000004800)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) 17:54:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x4, 0x8, 0xf1a, 0x20}, 0x40) 17:54:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000011, 0x10012, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x15d4b87) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) 17:54:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x24, 0x31, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x2, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:54:02 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev}, 0x10) [ 282.725961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback}, 0x1c) mmap(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0xc09c1000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) getsockname$ax25(r1, &(0x7f0000000380)={{0x3, @rose}, [@default, @remote, @bcast, @bcast, @rose, @netrom, @null, @rose]}, &(0x7f0000000400)=0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x20) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e1f, 0x4, @local, 0x80000000}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xffffffe0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) 17:54:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x15, r3, 0x923, 0x70bd25, 0x0, {0x5, 0x0, 0x6800}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x80c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x28, r5, 0x0, 0xfffffffd, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x0, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x5, 0x2a, "b3"}]}, 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmmsg(r6, &(0x7f0000000080), 0x12e, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="20002cbd7000fcdbdf254b0000000500f6000300000008005c0002000000369ba30892f809550a49f994c46f"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x8841) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00001000", @ANYRES16=0x0], 0x68}}, 0x20000000) [ 283.003462] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)) 17:54:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 17:54:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x5f, 0x0, 0x100, 0x100, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00', {}, {}, 0x21, 0x0, 0x6c}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 17:54:03 executing program 5: r0 = socket(0x10, 0x80002, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002020104000000000000000000000000440002802c00018014000300a907695e38c0036bcc471499668950771400040000000000000000000000ffffe000000206000348000000000c00028005000100000000009c02aa43edcfb3d795de2205bbac2b79ba785b32a4a6cec7066c85d1d2a90564a9c327d313c346adb8e336b1fa710322c18b10983fac4f70f41c721334c2f531828036a5112513e8ad20eee54176ae3a29199968c9e2169998879d04a3e2651efe27ec509241f4c279c0d0cc29097742e8e1c7c98619e62a046fc80333c0bb0edba514424309495a65e3cdb1283f"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 17:54:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}]}, 0x50}}, 0x0) [ 283.464839] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 283.494604] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 283.506595] IPVS: ftp: loaded support on port[0] = 21 17:54:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 17:54:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x240408d4) sendfile(r2, r0, 0x0, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) 17:54:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x1000}, 0xc) 17:54:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:54:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 17:54:03 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xff63) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r5}}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2d4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xff, 0x0, 0x6, 0xfffffff8}, {0x7f, 0x7, 0x7, 0x2}, {0xfff9, 0xa, 0x1, 0x4}, {0x9, 0x5e, 0x7, 0x5}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x55d9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sendfile(r3, r2, 0x0, 0x8000000000004) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400b86c94eebdbd86aa69a08e82760000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x2bc, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ad9c287}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12c16a57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cefd102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a95235b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3390}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24117522}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xccf9145}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30a0b5db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1b3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8feb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e5bf663}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b99}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf3609fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x621f6ecd}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5381c9b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77a6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b251382}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f20a3c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42c67b33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd53d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f14e5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x965}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76ede384}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffffff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x491a2d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ad1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4418}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ba4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bde}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x273a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd628}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d038b59}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fe0742b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x126f2c5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56fda139}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36778066}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a26}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74a8b5fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2092168d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x620100e4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f6c836c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5906}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59915298}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45fa3116}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e82216e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f42f844}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc595d98}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b8533}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c826c53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x707537be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000640)=0x4, &(0x7f0000000680)=0x2) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0x631b0000}], 0x400000000000132, 0x4000000) [ 283.728584] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) 17:54:03 executing program 0: r0 = socket(0xa, 0x3, 0x200000000000ff) sendto$unix(r0, &(0x7f0000000080)="ec6d773d92d93a3749c4e3f7a042280000f11cc3481823bdd211a4b6875b2943d2d72686530a9be8", 0x28, 0x0, &(0x7f00000003c0)=@abs, 0x6e) [ 283.870167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.961714] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 284.020323] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 284.105969] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 284.113213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12503 comm=syz-executor.4 [ 284.155637] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 284.229472] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 284.303786] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 284.344058] IPVS: ftp: loaded support on port[0] = 21 [ 284.358071] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 284.472562] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 284.517761] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 284.572664] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 284.603312] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 284.624551] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 284.650929] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 284.672078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12505 comm=syz-executor.4 [ 284.687419] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 284.713148] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:54:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}], 0x18}}], 0x2, 0x0) 17:54:05 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x0) 17:54:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x0, 0x360, 0x360, 0x360, 0x1a0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x8]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_macvtap\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 17:54:05 executing program 5: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 17:54:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002880)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) 17:54:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055ec1cfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(r1) 17:54:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 17:54:06 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000004c0)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x130}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23151}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 17:54:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)=ANY=[]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 17:54:06 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 17:54:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000000200)=""/4112, 0x26, 0x1010, 0x8}, 0x20) [ 286.544635] IPVS: ftp: loaded support on port[0] = 21 [ 287.001743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.026480] device bridge5 entered promiscuous mode [ 287.042263] device bridge_slave_0 left promiscuous mode [ 287.048214] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.068717] bridge5: port 1(bridge_slave_0) entered blocking state [ 287.077199] bridge5: port 1(bridge_slave_0) entered disabled state [ 287.098439] device bridge_slave_0 entered promiscuous mode [ 287.110797] bridge5: port 1(bridge_slave_0) entered blocking state [ 287.117201] bridge5: port 1(bridge_slave_0) entered forwarding state 17:54:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 17:54:06 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xb1d000) openat$cgroup_devices(r3, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x0) close(r1) 17:54:06 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x1, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x20) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005071c00000000000000000000001cf8ae5708b340604952df0f7e366468aedfe991f94748eed376031d5d3c69457e95568d62117ea5a6622a88ddf29a120c9ad0cffa363a741b3b7f3e5ddee6867949443aba30bb897916a200f945cd233bb0b886416fa507f54d84421d82e6c6b2082539dcafebfb1a12ba6ed239f27985dde6eff5e245636f44", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00"], 0x48}}, 0x0) 17:54:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0) 17:54:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) pwritev(r1, 0x0, 0x0, 0x4800000000000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 17:54:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)=',*^(\'*$\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x2, 'geneve1\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x2, 'geneve1\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x2, 'geneve1\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 287.319845] IPVS: ftp: loaded support on port[0] = 21 [ 287.325208] audit: type=1804 audit(1599328446.916:75): pid=12614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/98/memory.events" dev="sda1" ino=16194 res=1 [ 287.477850] audit: type=1800 audit(1599328446.916:76): pid=12614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16194 res=0 17:54:07 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, 0x0, 0x2c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) 17:54:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002240)={@void, @val, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}, 0x32) [ 287.521832] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.641740] audit: type=1800 audit(1599328446.916:77): pid=12614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16194 res=0 17:54:07 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000000040)=@tcp6, 0x1}, 0x20) 17:54:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000004840)=""/102385, 0x18ff1}], 0x1}}], 0x1, 0x0, 0x0) 17:54:08 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffffff05}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 288.409836] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.870566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.905035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:54:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/145, 0x91}], 0x1, &(0x7f0000000680)=""/188, 0xbc}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000500)=ANY=[], 0x1c) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x0, 0x7fffffff, @private0}, 0x1c, 0x0}}], 0x2, 0x0) 17:54:09 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r3, 0x0, 0x0, 0x0) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xf0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:54:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x80) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 17:54:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x8001, @none, 0x3}, 0xe) 17:54:09 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x2, &(0x7f0000000200)) 17:54:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x21}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 17:54:10 executing program 3: socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x14, 0x110, 0xd, "be"}], 0x18}}], 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x1b3e0deda1a6ab36, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macsec0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0xfffffffb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0xfffffffffffff000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040085}, 0x8904) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c4408f8149b48f87ad9c2c998ed09f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cb7de98785"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 17:54:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0), 0x1c) socket$l2tp(0x2, 0x2, 0x73) [ 290.455256] audit: type=1804 audit(1599328450.047:78): pid=12734 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/101/cgroup.controllers" dev="sda1" ino=16219 res=1 17:54:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f0000000040), 0x10) 17:54:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x80}]}}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x2, 0x3, 0x0, 0x0, {0xc2119cdd9e2ba59a, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x88a1}, 0x4004000) r2 = socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x71, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x34, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r3}, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_FD1={0x8}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_ROLE={0x8}]}}}}]}, 0x60}}, 0x4000) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'vboxnet0loem1vboxnet1'}, {0x20, '/%bdevvmnet1'}, {0x20, 'cgroup.controllers\x00'}]}, 0x42) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d42269fa4e00000000e9000500010007"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) [ 290.564033] can: request_module (can-proto-0) failed. [ 290.582385] audit: type=1804 audit(1599328450.047:79): pid=12729 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/97/cgroup.controllers" dev="sda1" ino=16230 res=1 17:54:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x300, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) sendmsg$sock(r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 290.648353] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b40)="f518377a1d70479d6a10101fab97cb3b3a2cdfe6f8b88cc29f4755440000000000000000000000006ee8fefd0c5600802400000000009f6a558f6453e3e7ddd364500fc8f5794c4a10e908d7283d19546e5659070803010b509a2f39f3e9376a9cf56835f4ef5bc8c0c84b4966716367e5c28d03cb851be973e341e736047d9e491eb3f4474bdac7fa46e4672e4f8b568b4bdd5ac2fe8832b73e27545de34e090062adc3", 0xa4}, {&(0x7f0000000200)="8f31ae97c81b31e59a6321f6d6e7f21d384859a4d4112372437d5b5f5a6292c8ceb3be4422", 0x25}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="55a63ca73d52b3f955f5250cf8e6f342d3ed59380ccace432b540b986ed7e7ce21271459842f0afec93a59a4ab6660874735b2432bb7fe14014ee6d1ab994cb87b6ecfb4d3d4c424cfbfd9a1d1fbdc98aabb8d4e23cbba6a5b1bbf2cc2f28ea2bb64ee1301dec8a325a1c55291636fabbc94c3585de3fd5371aa09b1e3df61092ad3cf89b85f", 0x86}, {&(0x7f0000001240)="b1f0d096818125e3be2eb1e50001000076e4e9712eb1556a0458812c31e058d7fed68074a1d37ea07ea46f73b15ec6a21cabb57e529f403b89639ce9b3fb661ca7a297749f71f21af2da14b25fb201ddb80e269fd2185a2d3f1dd6ebc04be0861c1bc0f9e923c33134d6d9419d51", 0x6e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="1179c8bfd4cd9f76dca3196a84497a8312f243acd5897f232f8a3efad897b17bde88980c4582e35ec3d7e64973f3886b3e40b302f09fe9935985d60fb36e1521d688da815a0574373bc15bae7908008d9ea5ebbb9f8d72950553dd63f7bf3ef85e1c34e8e90c69cffb3f50c1884ab7ab8a8daebf53e627e2f63dd9f42887d0c729880daf554294e3ac402a1cc070", 0x8e}, {&(0x7f00000004c0)="95ddd95bc0bdf4262b0325efb9f852597b3afc76cf3231a0650e8499f69c10485cc21b2ea259901640a913355c836553392b175aab6046a0f0cd6196c4a9cc4be6209864e9750e6e2cb9e17a", 0x4c}, {&(0x7f0000000900)="ed6e1b5624fe2878010530698b9a9d906f782793d8635f4de571ecbf51ea562222f322f36fce83f198cfaf1068053f8dfdeeb29e89b99c78cbcbbce13acde18f42e3f8b417fa6c5df5e4be9e0384c5d23cd2b98c10608c09583546a2a8e9e5aa2441de574680bacc2942f3d3ff816993e12de49f89ec517d1cf5518f84bd5cbf37d15d743596eeb0faf6b968024219ec208cbe9be0dcbd704c8a437e63c91e31662faffb42df1b61392e7ef3bf0ef91c1812ceaac2021392fdf1a8fe678faa7a05c317fee3c1ea372436f865f9d4ed0800187641b0e45fdcb808994bbaf21c43ebdb0c0dfadc340b811de9353022532e111612ac6518700000000000000000", 0xff}, {&(0x7f0000000d40)="ff2c01230f6e68028ff1dfff80827d753d6c2ae64817986f06c538c41effdb5807f2122e4e4de161eb8010a3b66cfd019eab4fb8c7c8d8b49a3c2b3779f05ef3adb31e13c20a1613ab22875252e5f6abde189d20017f0f6dc8bd6719ab154dcd55b2355c5a355ca03b3e265e3d552679b15b3138c78dca9b92b279b86dbe2717ecd6787a71a9921a53043421d0c3ada3608c115a2032a4858abb33abdce34d3f2d155e01e7f262dc0f018d54ca654a1c4fc346c7e8ab247e8f5f847db8f7b9cbf754385780150df175d352f6e2b6e7fef7e7a37761142896a7c98ca8d44c31c20df2bf257d", 0xe5}], 0x4}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000002c0)="ebb22d6b83b15660007575a6b10000000000000000000000000000dbc3747ee4a986e01f4b4c8c5fb5aabc18e496fb6dee9afc991a53bacaa32c1c950d577851933ce03fb37d93a52f92a88c7e749493e6bd083e0392160374e06591ab7410daa74a459786bf6bcac96aa9ce6c1ec971c917e5a129534fd34c822f134cb6f2994acc7a1d9024bd5159b534f19b48ee5714fa3198d938130e1bcfbd39c6462a01b4bdf9c1c2f8259d568a411cc09aec38cbe2f12ace7c7ea19ae947adb3a90aa05087d311b7e702", 0xc7}, {&(0x7f0000000fc0)="1569b33bb070f83600a121c7669187398da69d8b7f7d297f94ab0da950d524d6891a60", 0x23}, {&(0x7f00000016c0)="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", 0x2c7}], 0x3}}], 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) shutdown(r0, 0x1) 17:54:10 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d00800002400ff"], 0x8d0}}, 0x0) r0 = socket(0x10, 0x3, 0x6) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7ffff000, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0) [ 290.746764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=12759 comm=syz-executor.0 [ 290.755891] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.768495] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.785131] audit: type=1804 audit(1599328450.107:80): pid=12738 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/97/memory.events" dev="sda1" ino=16229 res=1 17:54:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x5) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000001680)=""/125, 0x7d, 0x0, &(0x7f0000001700)={0x9, @null=' \x00'}, 0x12) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001640)={r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) pwrite64(r2, &(0x7f0000000200)="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", 0x4000, 0x1200) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000001500)={'syz1', "c9f00ff06ebcd201eabccce5c92f47eb432a4d0101b50220fb0cf6bf76c87fd2f5ada8fad3c09fb99bcebf8151538d1e334289f091ac448cae5bd1b8f8a9752cca22488267f7ac6e811fbc1fa87ef4528ede9165d59c1e1c4ce90f95f1107cb269"}, 0x65) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) recvmsg(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=""/4096, 0x1000}, 0x1) [ 290.837417] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 290.870705] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.883501] netlink: 2236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.912426] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 290.934862] audit: type=1800 audit(1599328450.107:81): pid=12738 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16229 res=0 [ 290.976317] netlink: 2236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.060713] audit: type=1804 audit(1599328450.127:82): pid=12738 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/97/cgroup.controllers" dev="sda1" ino=16230 res=1 [ 291.149768] audit: type=1804 audit(1599328450.207:83): pid=12725 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/101/memory.events" dev="sda1" ino=16218 res=1 [ 291.226619] audit: type=1800 audit(1599328450.207:84): pid=12725 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16218 res=0 17:54:11 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local, {[@generic={0x7, 0x3, "bf"}, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0fab47", 0x0, "c564ea"}}}}}}, 0x0) 17:54:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r4], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 17:54:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000b80)=0x6, 0x4) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x4e9, 0x1f) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x10000000d) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2, 0x2, [0x556b, 0xffff, 0x2, 0x2]}) 17:54:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0xa, [@link_local, @empty, @broadcast, @multicast, @empty, @link_local, @empty, @random="ff9156ad267b", @broadcast, @remote]}) 17:54:11 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0600", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, '%(A', 0x0, 0x3a, 0x0, @loopback, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) 17:54:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000100), 0x3}, 0x20) 17:54:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) 17:54:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x17, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 17:54:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xb8, 0xb8, 0x0, 0x0, 0xb8, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [], 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0xffff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 17:54:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, 0x0, &(0x7f0000000040)) 17:54:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fe0, 0x0) 17:54:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) 17:54:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="e11abce40dc4c42059fa77865d0d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:54:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) 17:54:11 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:54:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4a}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 17:54:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 292.059855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.060622] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:54:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 292.155251] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 292.192444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:54:11 executing program 3: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 17:54:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000000206010000000000000000000000001005000400000000000d000300686173683a6e6574000000000900020073797a3000000000050005000a0000000500010007"], 0x1}}, 0x0) sendfile(r2, r1, 0x0, 0x1fffffff1) 17:54:12 executing program 5: unshare(0x64000900) r0 = socket$inet6(0xa, 0x1, 0xfffffff7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000011c0)=""/4103, &(0x7f0000001140)=0x124) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x8010, 0xffffffffffffffff, 0xa3c22000) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000c, 0x13, r1, 0xf1944000) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x4, {0x0, @dev={[], 0x1e}, 'dummy0\x00'}}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'bridge_slave_0\x00'}}, 0x1e) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001180)=0x8, 0x1) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x4, {0x0, @local, 'ip_vti0\x00'}}) splice(0xffffffffffffffff, &(0x7f0000000040)=0x20, r3, &(0x7f0000001100)=0x8, 0x7f, 0x1) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000180)={0x3, 0x1, 0xfd, 0x0, 0xc09}, 0xc) [ 292.554600] kauditd_printk_skb: 5 callbacks suppressed [ 292.554615] audit: type=1804 audit(1599328452.147:90): pid=12909 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/107/cgroup.controllers" dev="sda1" ino=16245 res=1 17:54:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001480)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}}, 0x0) 17:54:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000780)=ANY=[], 0x24c}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 17:54:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14) 17:54:12 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=""/11, &(0x7f00000000c0)=0xffffffffffffff98) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40c5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 17:54:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x0, 0x40}}]}, 0x144}}, 0x0) 17:54:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000003700)=""/239, 0xef}], 0x1}}], 0x3, 0x140, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000000)={'lo\x00', r3}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) 17:54:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f000000b580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 293.131467] IPVS: ftp: loaded support on port[0] = 21 17:54:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001540)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in6=@dev}, [@algo_crypt={0x25, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8}]}, 0x140}}, 0x0) [ 293.160897] audit: type=1804 audit(1599328452.757:91): pid=12937 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/108/memory.events" dev="sda1" ino=16253 res=1 17:54:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000200), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @loopback}], 0x1c) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000680)=@newtaction={0x34, 0x31, 0x53b, 0x0, 0x0, {}, [{0x20, 0x1, [@m_connmark={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}}}]}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x1404, 0x20, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x14) 17:54:12 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "005fcb", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:54:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@acquire={0x134, 0x17, 0x7, 0x0, 0x0, {{}, @in=@remote, {@in=@broadcast, @in6=@rand_addr=' \x01\x00'}, {{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}, 0x8}, 0x0) 17:54:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x6c, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31000000000000000000090000003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) [ 293.378182] audit: type=1800 audit(1599328452.787:92): pid=12937 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16253 res=0 [ 293.430383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=12978 comm=syz-executor.2 [ 293.479364] audit: type=1804 audit(1599328452.787:93): pid=12944 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/108/memory.events" dev="sda1" ino=16253 res=1 [ 293.505165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=12965 comm=syz-executor.2 [ 293.515530] IPVS: ftp: loaded support on port[0] = 21 17:54:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x20101, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) clock_gettime(0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x100, &(0x7f0000005c80)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r3, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp}}}}}, 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0xffffbffe, 0x0) [ 293.533345] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 293.614093] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1023, id = 0 [ 293.946743] IPVS: ftp: loaded support on port[0] = 21 [ 294.113847] IPVS: ftp: loaded support on port[0] = 21 17:54:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x5d) 17:54:13 executing program 0: socketpair(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0x118, 0x490, 0x370, 0x370, 0x490, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@local, 0x22, 0x3d, 0x101}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0xeed, 0x4, 0x1, [0x1, 0x8, 0x22cd, 0x8, 0x80, 0x0, 0xb38e, 0x5, 0x7, 0x7, 0x0, 0x1, 0x3, 0x6, 0x8b, 0x101], 0x10}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0xe, [0x4e24, 0x4e23, 0x4e21, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0x4e20, 0x4e21, 0x4e22, 0x4e21, 0x4e24, 0x4e20], [0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, [], 0x1}, @ipv4=@rand_addr=0x64010101, 0x15, 0x39, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x4, 0x4, 0xb7, 0x20, 0xfff7, 0x50, 0x204}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x3, 0x4, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0x8, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) r7 = gettid() write$cgroup_pid(r6, &(0x7f0000000040)=r7, 0x12) 17:54:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 17:54:13 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) [ 294.703287] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 17:54:14 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) connect$bt_sco(r1, &(0x7f0000000580), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={r4, 0x9, 0x35, "5a4e9d41eb4d9b112df88b50e4d5aade65e4964c8534746be38cab4b52d288d0f352c57d8873240eed0fbdfb5468613e733b5ddaec"}, 0x3d) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x800}, 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffbff}, @IFLA_GRE_TTL={0x5, 0x8, 0x81}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 17:54:14 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 17:54:14 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffffbb) 17:54:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@enum={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000004600)=""/210, 0x43, 0xd2, 0x8}, 0x20) 17:54:14 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 17:54:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r0, 0x0, 0x4000002) accept$phonet_pipe(r1, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x100002c07) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r4, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 294.983685] audit: type=1800 audit(1599328454.577:94): pid=13086 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16239 res=0 17:54:14 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x9, &(0x7f0000000100)=@raw=[@generic={0x42, 0x7, 0x6, 0x1000, 0xd7}, @generic={0x94, 0x5, 0x9, 0x54, 0x2}, @alu={0x4, 0x0, 0x2, 0x3, 0x7, 0x100, 0xfffffffffffffff0}, @ldst={0x2, 0x3, 0x0, 0x2, 0x3, 0x4, 0x1}, @generic={0x7f, 0x4, 0x2, 0x6, 0xffff}, @alu={0x7, 0x0, 0x9, 0x1, 0x6, 0xffffffffffffffff, 0x1}, @exit, @map={0x18, 0x2}], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xc8, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x68, 0x0, 0x98, 0x0, 0x98, 0x180, 0x178, 0x178, 0x180, 0x178, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES64=r4], 0xfffffd9d) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r3, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1, 0x2013, r3, 0x0) mmap(&(0x7f0000147000/0x1000)=nil, 0x1000, 0x0, 0x2013, r3, 0x0) connect$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x3}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24009}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x10000000000000}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x0) 17:54:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 295.067980] audit: type=1804 audit(1599328454.597:95): pid=13090 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/103/memory.events" dev="sda1" ino=16239 res=1 [ 295.143941] SET target dimension over the limit! [ 295.187882] audit: type=1804 audit(1599328454.597:96): pid=13086 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/103/memory.events" dev="sda1" ino=16239 res=1 17:54:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040601"], 0x1}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 17:54:14 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000140), 0x4) 17:54:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}}}, 0x26) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) [ 295.305557] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 295.365014] audit: type=1804 audit(1599328454.597:97): pid=13086 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/103/memory.events" dev="sda1" ino=16239 res=1 [ 295.381799] device batadv0 entered promiscuous mode 17:54:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, &(0x7f00000003c0)=""/141, 0x2a, 0x8d, 0x1}, 0x20) 17:54:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000002c0)=""/215, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, r0}, 0x38) [ 295.439064] team0: Device macsec1 is up. Set it down before adding it as a team port 17:54:15 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280077e6c6d4e977adfc000000000003f4ffffff74000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800809affff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) [ 295.494330] device batadv0 left promiscuous mode [ 295.506539] audit: type=1804 audit(1599328455.097:98): pid=13129 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/119/cgroup.controllers" dev="sda1" ino=16258 res=1 17:54:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x210000, 0x1000}, 0x20) r1 = socket$inet6(0xa, 0x80000, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x8002, 0x8000, 0x3}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendto$inet6(r2, &(0x7f0000001600)="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", 0x106a, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x3d) 17:54:15 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 17:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000e00001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r4, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x7ff) shutdown(r4, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x3, {{0xa, 0x4e20, 0x400, @ipv4={[], [], @multicast2}, 0x2}}}, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) [ 295.747962] audit: type=1804 audit(1599328455.337:99): pid=13144 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/131/cgroup.controllers" dev="sda1" ino=16243 res=1 [ 295.840163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 295.975905] SET target dimension over the limit! 17:54:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) write(r3, &(0x7f0000001340)="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", 0x1000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r4, &(0x7f00000033c0)=ANY=[@ANYBLOB="4bf73c648b5d3a5d02587ea6b77d6a7d06d0b276434160", @ANYRES64=r2, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) [ 296.252997] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 296.285895] device batadv0 entered promiscuous mode [ 296.301312] team0: Device macsec1 is up. Set it down before adding it as a team port [ 296.324618] device batadv0 left promiscuous mode 17:54:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 17:54:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$inet6(0xa, 0x0, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f8e62c", 0x0, 0x89, 0x0, @private1, @remote, [], "dbf15e8a4878eb35"}}}}}}, 0x6a) 17:54:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r3}, 0x8) 17:54:16 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000a40)="bd", 0x1) tee(r2, r1, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") read(r0, &(0x7f0000000200)=""/250, 0x79380dd) 17:54:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 17:54:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffd40, 0x2004010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0}, 0xc0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) 17:54:16 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) writev(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x0, 0x64}, {r1, 0x8124}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0) 17:54:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) read(r0, &(0x7f0000000000)=""/16, 0x10) write$binfmt_aout(r1, 0x0, 0x0) 17:54:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x8}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x400000}}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 17:54:16 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x82051, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r2, 0x3000) 17:54:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000004c0)="1c0000001a009b8a1ce5f46b000000ff23000000feff000000000000", 0x1c) 17:54:16 executing program 3: syz_genetlink_get_family_id$ipvs(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x2c8, 0x130, 0x0, 0x2c8, 0x2c8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 17:54:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000026000106"], 0x28}}, 0x0) [ 297.372687] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.447884] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.480783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100005077f00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000240007050000004016a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000080010000a0001006261736963000000040002"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000002d0005000000000000000000ec84c105", @ANYRES32=r5, @ANYBLOB="0300000000000000000010"], 0x24}}, 0x0) 17:54:17 executing program 3: r0 = socket(0x100000000011, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000001c0)) 17:54:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000026000106"], 0x28}}, 0x0) [ 297.667513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000000001190500000600000000000a0000003c0001002c0001001400030016e8bad33edad6b8000900000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000ac00000001080007"], 0xc0}}, 0x0) [ 297.790705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:17 executing program 2: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004000000", 0x58}], 0x1) [ 297.848081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.934844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x402b011, r0, 0x0) 17:54:18 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000100)={0xf99, "c5e345348f167230f1a15ce5191c5a74e8efa23fe534f572bded4bdcfb9dea23615464cf655c7ee25415a6276eade11066f2a6154b4e829aaa3cb90c6c80e4ca3e9c833bdb29f6b87a037c722b953f142fd6ed327fa01101be3d5689fda4edcab17b0c1c9d441d8a43af465d14d836843dd10f41b2036120c7022d6176073f17"}) 17:54:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) 17:54:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 17:54:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000100)={0x6, 'batadv_slave_0\x00', {0x50fe}, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) 17:54:18 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x3) 17:54:18 executing program 1: r0 = socket(0x10, 0x800000000080002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @hdata="350d58c015e6e80930ced57bab3633e23d9d2b6102dc2e03f323b13e004ab508ab8443707ea68ad6bc31f944125443df795bec95", {0x0, @random="ec859b542363"}, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) [ 298.757984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 17:54:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x0, 0x4, 0x0, 0x6a0}, 0x3c) 17:54:18 executing program 4: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x40000000002, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x7) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 298.923197] device bond2 entered promiscuous mode 17:54:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="48000000140081fb7059ae08030c04000a1100b9eb1b870100000000dbd78fc0adbd7c493872f750371ed08a562ad692c3170f787a0346a25ac6bfe74703c48f93b82a0200000046", 0x48}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:54:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xf48, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x51, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) [ 298.965799] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.972331] kauditd_printk_skb: 2 callbacks suppressed [ 298.972346] audit: type=1804 audit(1599328458.557:102): pid=13336 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/114/cgroup.controllers" dev="sda1" ino=16287 res=1 [ 299.030993] device bond2 left promiscuous mode 17:54:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r1, 0x11}, 0x14}}, 0x0) 17:54:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x10) [ 299.573355] device syz_tun entered promiscuous mode [ 299.644260] device syz_tun left promiscuous mode 17:54:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000a40)="bd", 0x1) tee(r2, r1, 0x3, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xa000) 17:54:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000080)=""/51, &(0x7f00000000c0)=0x33) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r2, @ANYBLOB="08001b000000000045e1f284dd3a7aecd5d78f4bc9e47ee86d9063efee098f25641fb238cc5539a6d5787960cc9087116375b0f7dc112f3e83621323eb5e55e390f9f51da0ab581a31dadddba777acf38c95cec9d257658fa0cad48c01616cedd8eada1c3be60652d922e0d95503d95e5acfee5b9bc090afa9385944ed52ae"], 0x30}}, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x7fffffff) 17:54:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}}, 0x24}}, 0x0) 17:54:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote={0xfe, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r6}}, 0x20}, 0x1, 0x3f00}, 0x0) [ 300.082001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.092327] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 300.105407] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 300.130207] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 300.137933] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 300.147705] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 300.157780] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 300.169815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.185140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.193369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:54:19 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1411, 0x101, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 17:54:19 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xff01) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vlan1\x00', 0x10) splice(r0, 0x0, r2, 0x0, 0x1ff800000000, 0x0) [ 300.267944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0xc05, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}}, 0x0) [ 300.316909] batman_adv: batadv0: Adding interface: veth17 [ 300.327440] batman_adv: batadv0: The MTU of interface veth17 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 17:54:20 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 300.418770] batman_adv: batadv0: Not using interface veth17 (retrying later): interface not active 17:54:20 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x140e, 0x15, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 300.462189] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 300.471645] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 300.496328] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready 17:54:20 executing program 4: r0 = socket(0x11, 0x80002, 0x0) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000000200)) [ 300.521933] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 300.538516] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 300.551099] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 17:54:20 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8100635b36ddd74531032c05fcbc2947aed2ac30ffa106fdaaad6749457dd8cf8d825932c343adc319df0649d01cf4ad1b4233a3da43e64107141be6ee1274607afe4702943bdd3649c32f050386be563cee95f5a6492281f5d4d13adfa5f49316c49db235e29189ccb682407e27191a4d76217accc2c06389f4614acf13a100e67fd8a1eefd73554bf5ab7682e5b09213f758e5143cbd88b8e79a083c26ade9ffd990d6dc75a7408556cda2ec974d3896500357fdd3"], 0xc) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009180)={&(0x7f00000016c0)={0x74, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0001}]}, 0x74}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x30, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="89ea4f762d3697285b314d87994b6cacb8d4784072c25ad776cac74245f2cf2ff99e12ab59aae9f3cdfb7602a586272277e4cc5743fee057fe2a5432b3836f9e7917af3c1a56e75c420f5052f6cf8bbe95117c1eca2a62f5397f5e7a8700000000000000d001257d05a90426b3ddac75fa073b6272cfa9721f9734c8fcd9213296eed620b39f21d0580a1f309928dbdb0ce6a1adc3b98afbc26c525c1509e462f83e1c007040cab7d3dd82d599caa80f0d31d4d7a4e031277692900b415459d98e0f8cf2d461bd26258df7b2d6243b0c30fa511d58cab7c4e726c34c2c2da40d3dbe", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 17:54:20 executing program 4: getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x4) accept4(0xffffffffffffffff, 0x0, &(0x7f0000003a40), 0x180800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) socket(0x10, 0x2, 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 300.583605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.616117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.625653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.718428] batman_adv: batadv0: Removing interface: veth17 [ 300.753077] qfq: no options 17:54:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xffff}) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 17:54:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3800000012003dc1"], 0x38}, 0x8}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 300.780988] audit: type=1804 audit(1599328460.377:103): pid=13461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/128/cgroup.controllers" dev="sda1" ino=16281 res=1 [ 300.858622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) ioctl$TUNSETLINK(r0, 0x800454df, 0x748000) [ 300.893391] audit: type=1804 audit(1599328460.487:104): pid=13453 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/111/memory.events" dev="sda1" ino=16282 res=1 [ 300.992458] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.004311] batman_adv: batadv0: Adding interface: veth17 [ 301.013437] batman_adv: batadv0: The MTU of interface veth17 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.062825] audit: type=1800 audit(1599328460.487:105): pid=13453 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16282 res=0 [ 301.112213] batman_adv: batadv0: Not using interface veth17 (retrying later): interface not active [ 301.164183] batman_adv: batadv0: Removing interface: veth17 [ 301.166261] audit: type=1804 audit(1599328460.487:106): pid=13462 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/111/memory.events" dev="sda1" ino=16282 res=1 17:54:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x3e, &(0x7f0000000000), 0x20a154cc) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000040)={0x0, @multicast}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="48020000", @ANYRES16=r4, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x24000851}, 0x20048804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x400c084) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={0x0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:54:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 17:54:20 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x20, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 301.284079] audit: type=1804 audit(1599328460.567:107): pid=13452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/128/memory.events" dev="sda1" ino=16274 res=1 17:54:21 executing program 5: setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000580), 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x10, @empty, 0xd0c}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x1ff, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)="ed9507aa68c0184d9d79df6de01ef8ecad9db467cc086d2c4520d950693ebbb1cb1f528be3854835d356d5cfbd90abff4bb15e9b3c7ca38b76e44fd71bb9d70e0b4328ba5918e013d2d8150a54edb5c7769edbbbf3a6e4dca0b7b4f8944f8b75b1707b9c462e8a016ac6e377e460ea57fcccba1eea350f563508573969334703fb1c9901b63a792ab061563717396eef073a23decf7b8669a298affe925a5b960ad2ee565d47dc64f3d871ad80175a8cadc00fbeb177740a3d88b8d87d3427dbb405b887c8b093381502644759e5f17db8c6fb20c06117da7e7bac3224888b8e8e4d13159b599ec0219aabb336d0a26a5600ab0f0cd5a67e667edb0e884a760ae60d78c14fec22c2d6c3e44989785ae283c84f7c5d1128ac9fb1397ad6e2933b3130d75d6a1b6c2a137dd49d1414b28cb16a024ca52e17c158e6841dfabd039fb71abeb3a69c3473ae22b6dd7efcbf548e033739a79c88ee45928efb78913d49ff96a0480ebce4649da6971b8239b04c5771fbd63a8068784f8b4e5df1c5927ba23f6191508f588ec06550f27aca1442a058f8898d6c93267a970b5f79f84b37e1897f11dbddade03952de4ada4229c5da0401a7084416b4eddf5d79f752dca6f75b51c455322f567eda4a99c143a6d1fe548d7f4ff5339158fd001651f819a187d6f021e30fd67084d6ea497cfcfcb2f05b524b0843f1ed7e38cd36125bdbf91f89872845fdc098afe903b68d03243e700a7ab40bd90310559db4d0a07eb9d1eb1c0f272e877a4f68d6b5a053132637c804139e350fc3c88b2336fe0c11b043dd6d926e2080c855af98fb3c8158c85b85f887c0af7fb6d4c39a47004021dbacea95ae9ffabfea256725006f19707eebe6b4fd6d517be82a8576f7015a3deb7c6ba9fdde5c82b63cce255a0cee9cc5dd2c00da9e0ef31bcf730f3c6cab51d91f85c81352a26d7f66fe8fa15f4d2ebfc2d6bd4573b7c0b94d98ee4b729965b8db3555a048d69245807ad15741dae1a9d973b2793cf96488645ed514b3cd0847a2ed985644b9c820e4f3ae351750c0e720dbabb5c09d6a78790834d47da3d7930785dfb1b092e4a8e4c5efe54d4d6ce789b92f48389fba07fd2067c180ebb5dfd944289243649f111813bae50eb692fb7298e63cd0884662f8ca1509da29dea1b585dc19aef8d4d0e46336d76ccfae7b0643897d9e43c7fe2fd38ba78486f762ae69feb9d7add1428c97a7e4d0799a045e7439110bb0226c89d7a19fd652adabaf1bbe126889bea6fca759140c160cca9ce66ef5a20c74440e22534255caf23c7cf8ebb4813a4367caf129ecbb696ba66723bc02baee2a5cc5f98d8b19f08b78bf58760653309c2556f4300acdab4ab20f4d312cdac93f0a950cc92e48076c5d4c18d444c9cc52f348caafc88e7ee24ae7fbe622e3b04dee9a7bfe0eaf0f9bf7c9aa5bbc909e4a4ab2cce77eaebfcd9d6d0b8786baf4a89995c42369dc9f2a13dfe40bf39e6bce1085d86b0182c49186de2dd2a7e1389831691614d13606cf338348890820df5fb6e7ceb45e85d626919211d72722f2e9c14e1c306ceac8aaa79b90cbb1c39b035fad18d7413487ab36d3b9e4b2c5b0b1e2972a4c78844e336cef7a846040932b72d4608c42f2e979e574b42e5d47784c873120de58201dc650a70a78dc1623d5c9f3a71e8fc3ad924ec17480ac6300f0182a65392a2cdd441790fcd15bfc7ad850c3eaf9fda48a6e765e7355e358cf19c7aacdeb31640b96c61db94a0f885d7f7bd9ba66d61de4cc4a8a4cf27353bde7216657071c73e05701cfb00e38c4512fb3ed2a1d5e5bddcf5dce87f0cf74515898e3a01759181477a8d3c3abcf5c4c3a2913661b6543be490386915e47ed02f3336f5bec1fcf8b0b347476841661a9587d24184c2b21f6edf00f2efd4aa58a58d8bf1ca231025d692d1671c287b9079ace873e027dba57af3361cad804507da3018015d9582cea67847bfc4b271764c1caf6510f5a2e164aa504d5b754e886f5233ce969666bd18a2e6a50cedd551c4830ea67f84b27ce98cc9430871720dd22049c7e4ea216bb1040b7bf2e575935427cb0d24909a3c7e1a38cca0edd0c1fe66227658acf4f51351e921d85be6d1675156f04e2f74771d533ad8caeed1cfda28e9d2dfcbba00f204843750073ad9724b2128f44c285de86be258cb3c826efadf5ac7bb5374fe6558eb5448d43001177af8c13aae50562c687f504f086989b57d035dd95636db01b951b5bd528143ff53cfd1e237b9db1d5f32f5a9867c6ae98f3f82326fb3bbceeb79a6beb8ee8f0d50aa5a69a51f1cffad7389df87c7c62a03092aba7de1ce46b8e186cbd766f1f8d28daec175c1cbe7045b24da42c60b0952be00a224661fe4acdee8eded734473ddcf2f148ef3c92631d3f4277f0d03edd974d1ad4e213d176335c5fe14ab2243dcf1c74c0832ac1f2e3f99c72f3070a17daa7fc4ace58d633d01d112a4f703891bbc3b3a87cb8c836aad3c17acd36b99da6364d5c02140dc27d3d2669c410f1c69535bcbcc069325de2bdc32264749eaf4f174bb971a0caf617bbf7e8af42ff3f71dfa5785ac2be5cb4020b28e51219d9217c78450ff09b29e440401479e41817318a9cb3b34839fba6e20ece28e5fc605c94053a975cf5b3a5a43e935db8f662861d168281d90a1abc3e8a3a60df4188b8abbdffb3656977ce9be46d54c9b78cb397ae11eb9d66e7f22076b4aa796352fc84c70be6e728f3e5bc366405d6b82dba442d35443c4fee5afbecd883628c20fcf895234a4ca6bf798e02ca31f86a0c65d54f978e39c205d7fd356432c85526bee5f5ccec6d91466de045c38a57c9d40d2cb65779e5a27b38a6d56513d5665bcda42c1a144e43f6a1faa19ecfe97fea870e2e9883d1adda56aec43d89a233f56214845ed27c797315a2eb1b7b99b61b5f2161555c38816d83e1c9d4f4ce296166d76975c7abf8ddefd287ca95fc882f48265e6f8c81c6ced671ee2e307686a6b55e875853c269823e1ce3827cc00aae72ebd8c8c076e3b3d8315707b94d66ec0e01d24ed1682f99cf01cbce3b7256f014cc56a204162cf06dd28c6b06f02087c2912d127e9cb9fb034df69ec8e96f9f501ba743a997bc1c2340559e2bb36fab26de6a2970012b0689c5e77ac1733797c5a293e61419477ef817867e4694989b9f117d2eb472a4511e44bbacd351557e00aafc51e9abded7f9bb8472233becf4b5174ffcb8782f706ac684ac995b12434dbfec1c57a6b16036e372926f0ec71637a2e310ab5547e137b6900ff0aee00212d7d50788946e5d6db115de2286b191c25b6c2fad336c528b940c18452c5fe4241a7fe62d8fe2a2b0b04c55004f992f65968261849a44440cfcdab33e223c1cdb711b48c286204b40023e47f61a6f5ac6bea54a688a6cfa6fcf190749b88cd7cbb4792c1090c4e49cdb29b1e1544b786d8d116693a03f1130ade605501e0752125f44e05ab8975fde121c1f84c449cb3455563e9f9e4a62c061d3b3572215f6c93d60ec027b1be7441400475a03fcf04283a1474c7d911619dd85db48fe214c324e2268cb1a5a967294f8652537a35202c7b6e339119ec394301f8948dc69a639e34d93390766896c569f080f267c0e3ce2e23769fd652bef38ada48ad91b2ceb8639714a6e5b1fdf6c1ac2d746d49ee808a3c1751adbdc3eb2759f36ec5bbebd79b3e61450afa4f960fa1feeab882d88513493347186839d514f1c3e7f39213d942e063232759bf3d03a645672189f3160cfeec43cf935ee2c1dbae1ad35ce7b27140282e9f8efdc39a40ed5721af3af352941d8096db3b623a5bfad6984949eccfd9ee7596f16821fdb177cd6c5bcb099b897a3c33bd67cc19498df8f73bcb60c1d16b48351239418688d00bd0e24f79c8c32553215ebe810e33bb9b1f311bc9925a65d786efee8a5488bcc6985e3dd6060a10485165de46833c14e95d6f46eaa0b5f7af52dc104eace4b3db8889085a40cbe94650ef04f53d1617c46bd42b0cfc9f750b07b5e4276b7f4382274bb3e68b5eee4efc079639b18ee142dc4d549e5598c6c53f1d497c22498db23e111d60c756b5e44c0196b7d0d937b01efd6ec756e8c39e6d2bd660fe3be2a059671c320a4da5b7914ac5183e02a1236742a7706675782339966e7030b4041923ef82ae857c235ef3c8383e852e93b35563f0e2e1b57d0bbab1d640378a60f4798ea2a212d82382c9e7b125cd31a39b9f3a12dcbe27a1dc30f7cd9ba098bb34ee9397b5c5686a1217ec1f3ad1fb2458d95dad971c89dc21916b1c612c2c490052a609eceffb8469d899eaccfab99aad3bb98422140ba5a9ce4f46f0188b78598600a4ac4e9aafdc558ee23d79d256d53ae51cde6900f39af4c53054f9b2c64783700c552171574e2c6953bc85100f2596ea70960d180093e86320d5c003e25b880c79dffc8939e0b178604b74b6d7544ca1af4239faf73c5cd2c700b861cbaf7102bb9ceacd7899f11c1f614b36e98463281f8fd92ef48b799f4196c46b870e7d45d321ac8dc715e0fd8185ca3412c9c51fc71dece6c12e49335e37d084095c463df9143c150c9573e486eb31fb7264869d67e58275fb4adc7914c4dc0298c51592401fdb9a6b617f9fda8f774eb39e91d65618f5ed96f99105afa97bcf4256081440f03b2a1a62fcdcdd56cd2702d1599c92c9b6ce712b5b30bbd88e6286f6f906b32fab9e37d957361b6049a6747f855171768db9e2e4fe8ec068b649ee37b77a6ed5a18e5424f9b3563e88b54dd5789f499eaf8748de2e1af3a84531d69783d4c076902d6051f9c6a9b411d4fd3fcacee72a85e4389cccd1b70d3028825fdd44fbe01e1341482b51d80416d02637739c1fb82c6fd8705fd5437ad08ec900d0170eaadeb76de0930fc8f315b5ae535bc1d428ca735306332a69a3df57e640eae2708e7492db0d3feffb2f0118342849a4f55ffcffb369b14a55852714abdbcba2df7233383d9c95a18142c77d35f017bd02b68543cda507de001b337b67d77e1484db85193c8ac1c94424c81f82a7b9f8f722b5a835c524c32d04e13e1b8c5ffc3ea591da513b031c66890a31fe16310be371475d7a78d114c1bc08f4db63032d0736eee7cbfac10dc9a253eaa2b78565117b6f7dbff5901624825ac1b5a08b828c299a33f1117818d7ee61dfef12410806d48235c73ea140c6c23f9a2e73407f7b35b525b09e1baf0f30df86fdcd44ea1354f111be361d5ba6c1b6dd17a9a78ff1312973adf4e9b381c89aefa46ffb40bd1bb2ef4b4643b3e599070811266fd591c0b1f454047e9375ee6aa6ac22e28a34ba897bdf27e006e0a380ccc7b52b0531e02d6599a485d0ab90bc10990ef3eb22b89127c3a73be73855be5e8bb345faeeaf345c69ae928963da4f46452cf7453261c2464785ce100124b8d17bc8d5b31d3347c24da9b9bbbe5ef06392a219c7d1c12b9d253db417d1328ba2f713a8811bbf0bb2beea18aba4390abc937d3969360d2485e16d0070b73561a630aacbd6554c9579e0acd26d6ce1a95d930f3d1e4c32e81b5f4c5233f16640e8d6d8290427b272ca1f2e64bcb10068a409b3c4c1e5f8efa81aaf1cdc07c58abdbeb537a3cfc4d35536a7e9739a2f7704b29048e12e90c87251dc1fed6bc70a71773834bbc74d392341451cfd67f76df447dbf556f017b4fa8110d63590a606fd068967de6a52ddcac40a79b80b0773b7043b514abd5e5ff5e5f979c94b8c2f851169260286017fff1856b6f4da5e0", 0x1000}, {&(0x7f0000000180)="7751a13a9228752acd90c2d33222597201f67c3a7049d437775b94f124", 0x1d}], 0x2}}], 0x1, 0x40000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) socketpair(0x25, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000000600)=[{0x8000000, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="4a9a479a2352af46ce1cde239763411ba1d75b72c466233c2d20f43e873a6a9cf5e529039f0cb3a136c26fcea873fc92aedd1f5a0b395c61bedc838fc75d41f5afaf7b3585f272c6215b2defa6380504329549a6da8ca66de39538fc5e114a6d4d4317520ed5dd65cc4414ea4b872ab4b29b8d9300"/144, 0x90}], 0x1, &(0x7f00001e1e78)}, {0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000006c0), 0x0, 0x20005010}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="4f79a510f0f4123426a8ab03276a5e8e9b3cf3d4ef7a61a8bebcafeff3d20eccffd47c2651ba6c82888fd13debd639586b1e8957b89bc600ce1c6d9227a30c348a630707ad5f5d0b2bc3265368fc018da8842a2154ab19f1c9a4f66e08f5db325f15b4c7cb04375da3f62ef0a7214ba641fd89502eeed0818b9320b5824c842f11b12facb2c0f717dca568c3550e64d6f4b9872395c7feb429fd9d74f56acaf5b35ed99a56da8065c6ac70ad84d6a46109f33b3fd3fad61f92bdb8b9f30f97ee44675abbfa19e4b1ce85c563954a55137d8f90fb", 0xd4}], 0x1, 0x0, 0x0, 0x40000}], 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') bind$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x10e, 0x2, 0x1f, 0xd4, 0xf6, @local}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x20048040) 17:54:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'hsr0\x00'}]}, 0x3c}}, 0x0) [ 301.387434] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:54:21 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) [ 301.551409] bond1: making interface bridge6 the new active one 17:54:21 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 301.595538] audit: type=1804 audit(1599328461.187:108): pid=13461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/128/cgroup.controllers" dev="sda1" ino=16281 res=1 [ 301.624054] bond1: Enslaving bridge6 as an active interface with an up link [ 301.683730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:54:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000140)=0x8) [ 301.731822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.767736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:54:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x36, 0x119, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) [ 301.871042] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:54:21 executing program 2: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 17:54:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in, @nfc, @vsock}) 17:54:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000440)=0x10001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="f7", 0xfffffe96}], 0x1, 0x0) tee(r2, r1, 0xffff, 0x0) 17:54:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x30}}, 0x0) 17:54:22 executing program 3: pipe(&(0x7f0000000100)) socket(0x10, 0x0, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 17:54:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xb, 0xc, 0x0, 0x0, @str='{!@/%.\x00'}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) 17:54:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xfffffffe}, 0x0, 0x0, &(0x7f0000000240)={0x1, 0xe, 0xfcc, 0x7}, &(0x7f0000000280)=0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x4}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r2, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "3a017eb40b1d738553b4a3993ef8fc81"}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r5, 0x0, r3, 0x0, 0xd86dac9, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9, r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="5cdd30c37f3e0a6633c9f7b988a8", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r3}}, 0x24}}, 0x0) [ 302.589414] device vlan2 entered promiscuous mode 17:54:22 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f00000052c0)={0x5, 0x9bc, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "11f23adf02ac8af5d08aaf1a45ceec7568b7a9ae0f987f39cc071313a36eb12f7cb2332a1a45cc22ecd5aa516a0694b9b01ddf4d19bf081c3ad6758732fffd24"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {}, {}, {0x1000000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dbb4768b21aeea4"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000500)={0x6, 0x9bf, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "11f23adf02ac8af5d08aaf1a45ceec7568b7a9ae0f987f39cc071313a36eb12f7cb2332a1a45cc22ecd5aa516a0694b9b01ddf4d19bf081c3ad6758732fffd24"}}, 0x80}}, 0x0) [ 302.613021] device syz_tun entered promiscuous mode [ 302.679703] device syz_tun left promiscuous mode 17:54:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x22}) 17:54:22 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1320}}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0xa, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), 0x8001, r0}, 0x38) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) 17:54:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0}}], 0x4000000000000e5, 0x0) 17:54:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000100)=0x100) 17:54:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x0, 0x0, 0x228, 0x228, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'gretap0\x00', 'vxcan1\x00'}, 0x0, 0x208, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @empty, @dev, @dev, @rand_addr=' \x01\x00', @mcast2, @ipv4={[], [], @local}, @mcast1, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', @dev, @empty, @dev, @remote]}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 17:54:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000008001b0000000400cc0008009a0002"], 0x20}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) 17:54:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f00000000c0)=""/4083, &(0x7f0000001140)=0xff3) [ 303.033108] audit: type=1804 audit(1599328462.627:109): pid=13636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/123/cgroup.controllers" dev="sda1" ino=16292 res=1 [ 303.256004] nla_parse: 1 callbacks suppressed [ 303.256024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.281000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff00010069000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 17:54:22 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="050e00000728abc11d"], &(0x7f0000000200)=0xd) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={r3, 0x6c, "06b73b20a8a6d1102c93e84ba5ac2937235c036a98682a92825718e0157ca4ef43fb4a2cccc3c7604a719f14bd8180f42c2121153b01c601afc7c55e765aaa8d331849330e92d607cfcdc4706f9d42966a20fb77cc230e30c301b2dc2289c335b26cbe72edabaadf0605d897"}, &(0x7f0000000000)=0x74) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000f0ff"]) r4 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000400)=@can, 0x80, 0x0, 0x0, &(0x7f00000022c0)=ANY=[], 0x14f8}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000480)={{r4}, 0x0, 0x8, @inherit={0x68, &(0x7f0000000240)={0x1, 0x4, 0x10001, 0x63, {0x20, 0x80000001, 0x3ff, 0x2, 0xfffffffffffffff8}, [0x101, 0x6, 0x800, 0x8]}}, @subvolid=0x1}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 17:54:22 executing program 5: unshare(0x4c020580) r0 = socket$netlink(0x10, 0x3, 0x4000000000000009) setsockopt(r0, 0x10f, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c96d298529edcc312ea398b3f34a09d9f31cc649c5305780df8ea0d9b625c6a54d59bfec09919cf5a1bdac550cae2fea2e7a047592a57ce80463defb4fba685ae75c19ce5a44c34a85300"/90], 0x18}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000001740)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x54) [ 303.351933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.411394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.443372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:54:23 executing program 4: ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x2e, 0x0, &(0x7f0000000040)="e1865d0d", 0x0, 0xac1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:54:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)={0x184, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="32634f1488395cad076449eeb47128d3dbe989746360a23f472caad17e6d526c86f967bfe74f87eed3c44f073a8c3caff35304067aadd500b24855a0d36b42ffde52d5b59284ae960b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xe9, 0x6e, 0x0, 0x0, @binary="48649001377b64df448ba344da8de5c5e2cee7383b235bb49dd8d5cc46d1c24244a7da902c862902db2bab35340c143bcff62adbbef5ab5d41f24130d2029318df1e9e9960a842ab60d285d58b107612f7cb30de3fb9be50e576da87ba9d487d69d473c29e7fb3ec4cc304aca76533b281f2f30fa1fa0f58fce7a2601f320a359052ab1416040e16a218acf92cfd19d7acd3f660b11e1e486484c8853abed4b96202c64fd4b167274586efccc282080d43cee851b640a1271242e9ccf606a4c222fd19b5298ac9d2ac8c3decb16500ec00fc539b1e7178a981e50b11a05c0568bfe39f7c47"}, @generic="b1b50e4fa20a10635100e355b8f37495410a427f27c19ca65727c6b056fcdce1388384a2864d4b62af18af61990b"]}]}, 0x184}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) 17:54:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 303.480571] audit: type=1804 audit(1599328463.077:110): pid=13671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/128/cgroup.controllers" dev="sda1" ino=16300 res=1 17:54:23 executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x3, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x140, 0x10, 0x100, 0x74bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_AF_SPEC={0x118, 0x1a, 0x0, 0x1, [@AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, [], 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3f}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe0}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x2}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, [], 0x10}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}]}]}, @IFLA_MASTER={0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x80, 0x3, 0x3, 0xa0, 0xffffffffffffffff, 0xffffff19, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f00000009c0)="2cf8cf6ab082195b7aadd9196ac52cb6f3789b4847d6fabccf8e5bd665e7e968700281e9f737da0b09ad01db34c423738ec21dfe8ef5e5feb8b25b5b4d9213a23857dc968aaee42225cbc5e284f9216860816f01268d262a3322c010823504de08f1bcc95c04449f4208228e17dbd570054f29bd300cb507109f681c425a955c16f42638530e61a193bfa936fce8c3c1377034ae2f3977448e56f57d795a8f7ac9f15cd907e8440313de79b13ed3846b60bda50b03408cee0da77f094cf2d1a42f05ede48ca377db67a8c44139feeab5d4e01a8ae296569f7f3909780037f47a32cc98c45319306c9e835adb247077097c6caaafcfbe2e09bcf5291059b445c39b24d0c7cb325ff9d6fb2dc731aa59804b65292490f6f4d83b5821de5b649f28e1010002809a098c7590e6b8f23bec8d110326ad260c343dd412ef72a5505eb06730cc238f6a20c01e88666ddc2b8d0cba327524bf6490b95cae6198c0182e40452e1973f5ae5a24b20a1044307d3d610b3a8c783b9e48136d4b2c8e9c40110e80b5f5e61c44348ee73257d6b55227eb07b6f0c5e41207a1aa2595b7862e42baa6173b26039ff6f5d97b7626b593d34eabfc375f6cb79f6705bd3d7dd6a8d1c04cf9da2c44c071a1a699e7f42c81651b86f2726491aca753416bfd42961bb3d372232b6c2d8ee35577855f60d5189787ea345bab6142c6275c28256c7d10c67d995cf58b0fd699d334709744e0066f13caa2fee23726838a0fde480e422923bf9c2a6a96ff4c08092af346804e982c8676ad78a1b8863324a312c867ad0134213e53ba37dfc96ef28d699541fc297e21268cca28ac87959da9582fb2fb3a30b9058a9d25a6d8c00a6736c8cb5dedce21b9e1776149f06b2ab30de1762b1ae5ae638d2483b015a952c16f266152bfb49fd09eb383dc0143ed41438da568c8f56042e34c7a73c9342d6d6f071ab1a896a33b151862b429ca29189a8cf85cb971dc4068c69463b157e170284c5559ac19d70f76b70b38fac782400eb62a4ec2dd7b0fad2bc572f24d3b13eba1fa2b5adcea43a7d25aa6a4d371ac6c02d8bb65936079470d6394a546d905d5d96340017c273a3f67f9cb9cc4a67bb479e336b1ab9e19b7868b85ae02ea32d320820c2ddff7a0b6b54c2c55eb8743346c46b842135f520f71ccbbe8f2d1a7fdeeecd7240ab18ee80389f60dd32be8b779eff542ec1945f754955a0b816c98d620605c55bb7b1f2eaf2d1b9bb1fb6389142330fc15b022bae3f7fb537de0ba9ac5d3b118a7f7b28a3a4a90e4527d64b0e1ccb1b0701cd09cc142eefdc16275a7b06ad0f6d5af92b8070bdf048390dcce07c832dfe8dcd155890e100e4d7c3428debc759a1b7d16cce00132acc4c52c9cb6e8966abb998c045dd3506c88aeb497e46b7c76aee432007210d87a94f760a8a228286d1483027fced5fa9c9aaded2293b86b8eb33e5db1a67a1a330d4b964352b00c11c1c920146babb93d3d6a3f63a8a6659ccd31918b1b17372d0243552f16b69ebf00521acc23e2db10ab630ca294415f4fcafe93aebad20e81104ef9cc6a6bfd9ea1a40d8374125f8fe1079b80fb5af56455b7bc43d98bbcdd96904ae1e4628a7f1557a589c5ae7923a4dcefa90a63bc5d838c5d9b5b9c7d2e7720f3830172d4e63ae64a6cc11914fed7e0e6faf1def52fd296a99bc56eca839a6abba55aaca400b0db392fddaee49f0eebc6a49a64b50101a1be48b6d2fe7c38018a159f0ad75a487f0a3a509016dcfe853452fd09a84b098c3740883ad49359c9f2423d4d3371d6f1c87f7be6da0ca7026668c254d0bf114f991be282fec5c6b247791af071dd6af3a623460a2b71147d74e298ab5d25e8d03fd71fa4a581c07e79f58ef6684218dddfbc518e0a8468152ef72942107baa44f9ed27c986ae8258cf0f7b4fa6f2b04345a1124e78555b1524d330aa6c79c5dce4757d3faf24355dbc1464320ba0036e6e42ce5f39bec8c8646a63f18f6976b50e5ad5f20365abe7105bf0c2a6d0bcd69bcf68178570001f1ee16fd997df97c8ce4df5b827e72abf9760e9e620e249178efd301f794bf03241db06b702607bcf0ae85df949969b7174dbc7cb61cab1245ba240b1267b5cf39b50e850227e51fb094485e07569596335151faeba1867d928f883763796f6cf71a3ad0d43092169a9cf8b5aea5d9c84d06d30f534b99be3a52229f3904c42fadb2536908a8c5a81bf872478b6f03741192acb2e1518be75d59daa6f112e3075165d610b6d17274add51cc29099e7cc8bed12052b024ffacc4c7c22166215b707a62c7e7de59310df4ec1c2d8185a0f15976843cbc2e42e5f14f21377dec8e75c064bac9ced9d294fa8a59068c3b021df87b2002b08fbb9181313cb002aec8b78aa49d4f1270ce508555a1779895bffaeb884d6c783983a54c4260554709efc54093badf4b769a055b6789edfd10dc3a13263d903717b72058cf96d61dee728a1b7e3f8428e4570ebfb73ebee09e9b50769dc3bc375c659c67cb5e99de4d49405d27f414de8caf1174ed664dfad201b174cb4f520df4e45b98867e70faf94963286bd2e6f6355a5a2c5bf5276fc94ecc0f7a2f0dead30b64bc0f183b55b5756b94163373791fa4f6b55ed77f036bf722b753aa947d4308efca5938a735b1a1e2308125f011c17498c7a649c1e62cd3a2e9955238c4484dd7303bf7479f960215d4f122e161a5ff82bd11f4c7b83d6b076b4f5b230ce7b6b1504b19648bf451301522bd317d5bd4b47ea8fac35f850798c705f44342c3b413f197a419ccf4abe3cd1c33bae53d15671bc9820f797d67abdaa4c6c6804ee5094829c7c2acc5d840a47717cdf9adcdc57b2ec19a3cc8d683e60b41e554e5baf2de27cec42ee1bdba32e6765a9ccf2533ea5d838680080de1a1460e14f728a33d0fa50de099ea05438c7a8251b288c4ee43f580c706966bbe3ef03734b0a759b6fc6c0d1ca2ccbde91cf8cb528c3cce14a941f08ea4af18ab81b3c5ed8ce1f8cdef39d50f15fa3a68c56560ee9e9eacb2bf55b42205d235725061765aa9ada419bbf09ada0e2827aec82025ddc51eca0d5f55b3ae37d6d71c3fa02038f9201ad51f678005f5e8b28165cc5ac83b333194031d74230207bd100235746e567c07987c41ca60e5bbf581fb8eecd29d73d0a9000dc5259f6de504595158efe8282306b73c0100fc07f3280f956e959f52e2df93a13053feafe3d1bcc57ac85cb43f4ef6b8dfc44905806028835b545623353f487f9e675aeddba9427f52ee931f7571764bb2cb906fce4d755b26598b912dffa598930af175251969ca0bb96969a91cbddacc9db57921863d7e745f1908b6196d3b2beeba3e1d3486dfb402aff1d936e007dacedbeeef75d275c8a47a3cf26dbb5686d0e117abaf3315b76de382f945383dc5ae1c4e365ddd23476c8f0408d175b1180aa45cf53729f82e10b0d182861d77900963ad416b3373139a579d16d033f7e78471ec0a6ad41061d70c4323fced3bc5aad4a4e9ee912826862fca15cf3fc503b18db85edf174dc7b11bea4b01e4f75564bca182baf67c32ba94e8aae018ac03b93e670f5e776ab97a7c5604332bad05bb4850e0f9f37af6f7233169bef7f17c3e49509d47661cc79d180b3626d7ec996b5b06d1a8c57639382ca987903bf95b2b48f71aa8f23b22a6a8719a75296c5b3fd0c9b6ca9181970467362f254b7f7509658cfc07927f63c944d4fb95413cff5acf77f84f1afd3a50d1d525c394638e5ad7e8d090bce08abfcc1d7a0112c83620bbe75a382ab6676af6a7713d3bb805cb44870d744d1458f814e9ba043e82cebbd76145112ff44bba4c7fe52bc70d0535b87b58c31ef861a07c506a05090906fd7eab54d0d035feff76b8f5e251a15eca7d09163a4f0882d034d4e4d0c0daa011dab46726ff3c2b8dcfe5f8aa5798a58d3a93bec15a17b42cdaafbdca4899b1f9a2f1e9742bd133f4adaeea0751a0d008c20560e22e68e84c742bc9e500c25161f93fd298d653ee6410e8b537349c1238d8410b2bfa1e6622614fb03fcd3df957333b1f293d60d1c2f98b512e1759c05aeeb49a738f0b49f4b8a78526dd2a43be0ee5ec248bedd4baec7a144414e0a45a48aa203bcf6deccd7046479c0e462e1ecaa63645ece33a1551fa1c209aa6d32796e000c303356fd0d4a0c42e180856bb44650e4af3c2747100cb03283f697088f9f496ccf1e4f6fbac25b6c633a1dce124a8f12b38e69cdbdc6ebd265b90d9e8142a5b88e587a3e2826ffe2e2016507a18b367f35e977511d53ca55982d9e4446ecfeb901f2d4ddc5e516b1522e8a1083a7cfff1356eb20cc9f17ff1c12f1d22e5ac5bbe848da93f38d0aad843164ba5acacf3f20a55ef171789fb09ab0373de19571ee9e69e04094f5bea992e8900ceda5afc01a72cd8fb0a0b30c8ebd1f638bf439a9694f7da4d18fdbe7cdc1d1408aacfad8eed86026d2522657c175a688d0fab2c5340528aecc623a0eb30ae4b00601952e6b109a61977f8d7829569727715e54f28810f89e386ec70468cf5e6a4f14daa91459a39d70603c50fae8d11bb47416da0c9568bb945fc6045653fc33f00f243b0ca2b34c8d0d2e94a29c1fcb4c9f438ad0cc2a668f95770d0ef92b094cf6e63853e4cf29a89f3ad39e725e295012528b508b68f89fb9041e3dc5094bba6b4e11a846ae8995b447d3323271d5a84933f1dea960f2e5c34f788fac82d9cce3a7d2bf3838d1ff72eb3fc7aa1e0c8aec3e643fa8c2524ecfb5abce34b154e93817e1e26112bd3ef47064132d4163b62981c56195c59b3aac8d678619dca9829a9b7c668c7eb88fc0305101cad26d60d0bb1dcf6d5d27699ef07663f69bb62cce14403a62fb79ad57b5ad58843e723426b444d04182b07692737a4c08fc1a6b2350f8d8852d1826ed71b879f4d4fd5588cc03a9c8f8ff27e8b2aa339f24c1fa03465f88d9d117733594075250a990ce9212d121db7f9a50e176ef89158e0c75aff39259047d7f86316770b76c3ba4674cf3267bbae1cc63a4d22c5423de127fb10701b777d279055feb8814d4cd98daf3d80d3fe7b6595bf120ab1d4ff08410275be78048672eb9d1a5a5318d3b041c72ac362b397650f8ff65cd312ca1bf97b16b745da6f9efa609255dc95c890831d7e119d4b73ed89255a5d2829d4dc51b8618a51c5cb6822a529b997a87fc0af4585673c5311062359a7db48276752d38301febb31e6edeaff94f9b26ab348d5b9ebca2ba1aa3906f6bf15885e8912c27e3e6deb7adc13361399f02375b6c881e94dcca38463a0e9802d54f7a5b355faa4061aaec09ffcb514e40841fda2805bcbcd87a64b1889d79ad4457124710af9253c07df1bc4d0709ee59a046104cff6aca928bb341a2a5ee4d35c04005c67ac941f617802f58623ca005cd05353f9286868b0397203376d8db6441ec0118cd97ff3ed4bfe33433567a95c3473d1b3d2353b23cb3aaaef6b420eeb4ae5c96880b02bb002aea531ef033d3044f9f5601d1fa4cbc0fb6af9998aa275322d29843737ff999607340d49cea3", &(0x7f0000000340)=""/170, &(0x7f00000019c0)="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", &(0x7f0000000400)="ba7f9a4ccb6c3e0d060c4e79dc28c383607d49ea95fa56f5", 0x4}, 0x38) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x44}}, 0x0) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000000)={'veth0_to_team\x00', @ifru_names='veth0_to_bridge\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r1}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x3, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x3, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r5}, 0x38) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) 17:54:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 17:54:23 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 17:54:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000340)={'virt_wifi0\x00', 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x1a, r5, 0x2}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@local, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x18}, 0x9, 0x4, 0x0, 0x400, 0x4, 0x80000, r5}) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7a2eda9c1672b0096b964bf4205d7d9a2a93ab1ff090b314dbcc3a103382560fbf8acdcf83b2b2fb31d299ba1c488f4986c7907e6a742a32e50f200f0bdba216106870aa2d5eb1a6bc50b27af4867adf6f13f9dae45df95a76d4d1f69563ced9f73a5821709409c40fada02272c601959abb909700e288c809f9806763898153d7cd760e9802483fd75356443fa2f4b7a305a8ea9aedfdfe76650f3c74b24bde7c3e42bbca4d0b135750b5b2c724040c3380a56aaf6612f019"], 0x6) 17:54:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/352], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x6) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 17:54:23 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001480)=""/226, 0xe2}, {0x0}], 0x2}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) write$tun(r2, &(0x7f0000000200)={@void, @val={0x1, 0x80, 0x42, 0x1, 0x40, 0x3c00}, @mpls={[], @llc={@llc={0x2, 0x0, "2a89", "3a3f56ad955e785d51b54cae387b591794cfd00db8"}}}}, 0x23) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004890}, 0x8000) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) 17:54:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)={0x2, 'dummy0\x00', {0x2}, 0xfffc}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x178}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001300)={0x2880008}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000002fc0)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={r7, 0x6, 0x9, [0xe1a, 0x0, 0xfff8, 0xe3, 0x0, 0xfff, 0x5, 0xb1, 0xf4d4]}, &(0x7f0000000280)=0x1a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffe4, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0f0000000000000008001c00ef"], 0x28}}, 0x0) 17:54:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) [ 304.145476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:23 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9000000018001f0236ccfb0d1b849ab70a0ba502021d000506020a6c03000400100000000000c5ac27a6c5a168d0bf46d32345653602648dcaaf6c26c2912145497e5ade50460c0000ec0cff39595471509058ba86c9028000004c0025000411160012000a00005e58329c3e0000afa17124d5e73ec4471f000001000000731ae9e086ceb6cf62bb944cf20000000000", 0x90, 0x0, 0x0, 0x0) [ 304.309728] IPv6: ADDRCONF(NETDEV_UP): veth17: link is not ready [ 304.375673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.513587] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x80) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x340, 0xd0, 0x0, 0x1f8, 0x0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0xd0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000200)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x0, 0x2, 0x7f}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180), 0x8) 17:54:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 17:54:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x8ec3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) 17:54:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000340), 0x10) 17:54:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x2, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000002c0)='\r', &(0x7f0000000240)=""/31}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast1, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000940)=0xe8) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_route(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)=@can_newroute={0x44, 0x18, 0x903, 0x0, 0x0, {}, [@CGW_MOD_SET={0x18, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "ef536879f43d46e6"}, 0x4}}, @CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r4}]}, 0x44}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xb0, 0xb0, 0x0, 0x160, 0x0, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, 0xffffffffffffffff) 17:54:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8800) 17:54:24 executing program 3: r0 = socket(0x22, 0x2, 0x24) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 17:54:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240), 0x3e8}, 0x20) [ 304.965555] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:54:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 305.009525] delete_channel: no stack [ 305.022142] delete_channel: no stack 17:54:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000200)) 17:54:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f45344622000000d1"], 0x44) r3 = socket$inet(0x2, 0x3, 0x7) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000040)=0x802, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:54:24 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffffffffbaaaa08caae00000000005441c64800000032905851a861d0d89f74cd84d383e1eefccdd001"], 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d5, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09020000200004000000018005e301000a00000008000b000000", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x8040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4, 0x4, [0x3, 0x1, 0x521, 0x2]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r5, 0x5}, 0x8) [ 305.119300] bond2: The slave device specified does not support setting the MAC address [ 305.202312] IPVS: ftp: loaded support on port[0] = 21 [ 305.253180] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 305.444368] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.463708] IPVS: ftp: loaded support on port[0] = 21 17:54:25 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 17:54:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$x25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 17:54:25 executing program 5: unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r0, 0x0, 0x0) 17:54:25 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 17:54:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) [ 305.639114] audit: type=1804 audit(1599328465.237:111): pid=13905 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/138/memory.events" dev="sda1" ino=16314 res=1 17:54:25 executing program 5: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000003c80)="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", 0x4d1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000005080)="24acf1caaaf8bcc1dda2cdf48a700c968e66e1c4a8c01a3865d1a98a2f65758c0568e7bea08b533c73efe38a27ed215c3e92856149d6022f4ec24c672be25ba027f098106e4e45ea434fde9e0a09cac08c982ed4620200e8cce431d85f933202ff44bca5f15127814d5e74f473fa6041437687734c6c9670e95e02b28c8250641873df270bd5c6195f56dabe926121d0a6a89e375effbae74d6ea7c9dae36a967e9a612c5e687054f93e174fcd2aec28f9beb6d523b45bbf1b8d47db54510dae0358e0795f91baf4d80f188eec72228bdc", 0xd1}], 0x1}}], 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socket(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 305.729100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.749947] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:25 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x106, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x13]}, 0x3c) [ 305.797080] audit: type=1800 audit(1599328465.237:112): pid=13905 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16314 res=0 [ 305.864842] bridge2: port 1(bond0) entered blocking state [ 305.875292] bridge2: port 1(bond0) entered disabled state [ 305.913428] device bond0 entered promiscuous mode [ 305.934658] device bond_slave_0 entered promiscuous mode [ 305.947819] audit: type=1804 audit(1599328465.237:113): pid=13905 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/138/memory.events" dev="sda1" ino=16314 res=1 17:54:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) [ 305.994656] device bond_slave_1 entered promiscuous mode [ 306.016992] bridge2: port 1(bond0) entered blocking state [ 306.022746] bridge2: port 1(bond0) entered forwarding state 17:54:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, r1, 0x34053aa8db9ca77b, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 306.083430] audit: type=1800 audit(1599328465.487:114): pid=13913 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16314 res=0 17:54:25 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x5, 0x2) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000000)="2400000052001f0014f9740701094400020007100800010001000000080080e200000000", 0x24) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) accept(r1, &(0x7f00000006c0)=@nl, &(0x7f0000000740)=0x80) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xf3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x4000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r4, 0x254}, &(0x7f0000000080)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x0, 0x0, 0x103, 0x1, 0x0, 0xffff}, 0x20) [ 306.174629] audit: type=1804 audit(1599328465.487:115): pid=13905 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/138/memory.events" dev="sda1" ino=16314 res=1 17:54:25 executing program 2: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket(0x0, 0x0, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="1f", 0x1}], 0x1}, 0x44) 17:54:25 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4800) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x20, 0x70bd2d, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48880}, 0xd1d8fe6ca1780872) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'veth1_to_batadv\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0xc000) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) 17:54:25 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r5, 0x0, 0x2000000000a, 0x0) [ 306.382332] IPVS: ftp: loaded support on port[0] = 21 17:54:26 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast]}, 0x48) connect$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}, 0x10) 17:54:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) 17:54:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0xb3, 0x40, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x7800, 0x7fff, 0x8}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5ea4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_all\x00', 0x275a, 0x0) r4 = accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000002c0)=0x10) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300), 0x10) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x2, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x0, 0x0, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x20040804) sendfile(r2, r1, 0x0, 0x100000001) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x51, @default, @netrom={'nr', 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) accept4$x25(r3, 0x0, &(0x7f0000000400), 0x80800) [ 306.676405] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 306.692360] audit: type=1804 audit(1599328466.287:116): pid=13995 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/130/cgroup.controllers" dev="sda1" ino=16316 res=1 [ 306.721953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14000 comm=syz-executor.1 [ 306.781982] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 17:54:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x32}, 0x3ff}], 0x2c) sendto$inet6(r0, &(0x7f0000001200)="ca281cfe51f8352fae9e9a21c19e6e5bc733371332a0007279ca0927cb2b511493af974b2fc87b6cb1ad74d035e3f43f00170b737da4ff5bed8ff0b6801c3c7adf61f22237b0b6ca21ba8574702ae38ae0c9fbd5744b3a5488e57d6d6e730808b0d39336c9c8b220bafe5a89446df86332c1acdd0a0a1c4d66e60db859465ba03c287465ac933e45dd", 0x89, 0x20000000, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) read(r4, &(0x7f0000000140)=""/79, 0x4f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x103ffffff) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x800, 0x0, 0xfffffffffffffffd}) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 307.069514] audit: type=1804 audit(1599328466.667:117): pid=14019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/134/cgroup.controllers" dev="sda1" ino=16328 res=1 [ 307.216031] audit: type=1804 audit(1599328466.737:118): pid=14021 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/134/memory.events" dev="sda1" ino=16327 res=1 [ 307.369778] audit: type=1804 audit(1599328466.737:119): pid=14021 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/134/cgroup.controllers" dev="sda1" ino=16328 res=1 [ 307.399267] IPVS: ftp: loaded support on port[0] = 21 [ 307.463877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14025 comm=syz-executor.1 [ 307.603986] IPv6: ADDRCONF(NETDEV_UP): veth19: link is not ready [ 307.614758] team0: Port device veth19 added 17:54:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x1) close(r0) 17:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0xa}, [@FRA_DST={0xc5, 0x1, @empty}]}, 0x24}}, 0x0) 17:54:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe004000c, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000012, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 17:54:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1107], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:54:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 17:54:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x24, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}, @__IFLA_CAIF_HSI_QHIGH_WATERMARK={0x8}, @__IFLA_CAIF_HSI_QLOW_WATERMARK={0x8}, @__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}]}}}]}, 0x54}}, 0x0) 17:54:27 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETSNDBUF(r0, 0xb702, 0x0) 17:54:27 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) 17:54:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={[], 0x10}}, 0x52) [ 307.865702] audit: type=1804 audit(1599328467.457:120): pid=14057 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/142/cgroup.controllers" dev="sda1" ino=16334 res=1 [ 307.947251] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 17:54:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x14c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000040)=0xff, 0x4) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffbf51bf}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c801) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db8a1e3fb4590000000095f821c98fd20634934269da49836560521e0c0771cecbcdd0770787086fa9ff96a1c3e8d12c7dc69add7173b06a926f9b3f0eb00ed50503f15c26a969629362b9e7afb21d76"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x807, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 308.013095] IPVS: ftp: loaded support on port[0] = 21 17:54:27 executing program 5: connect$netrom(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) socket(0x0, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xfffcf1b0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 17:54:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372d64b9cd589bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca95db51734610850870c61a7e641c1d511a450531f2d5f018e3c8e9583474f457763558cd893e1b22d112c4601c7"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 17:54:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x0, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000005}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 308.074549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14089 comm=syz-executor.0 17:54:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0xff7e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x2880008, r2}) [ 308.260540] IPv6: ADDRCONF(NETDEV_UP): veth20: link is not ready [ 308.325773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14091 comm=syz-executor.0 [ 308.411354] nla_parse: 4 callbacks suppressed [ 308.411366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:28 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x11, 0x0, 0xcb) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)}, {&(0x7f0000000480)}], 0x2, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 'syz0\x00'}) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) 17:54:28 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000026c0), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x40}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x3f, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24004040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r5, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) [ 308.586792] IPv6: ADDRCONF(NETDEV_UP): veth21: link is not ready 17:54:28 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4091, 0x7ffff000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 308.759119] IPVS: ftp: loaded support on port[0] = 21 17:54:28 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, &(0x7f0000000300)) 17:54:28 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 17:54:28 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0xa09ec000) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000000)={'lo\x00', r3}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) 17:54:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="5cdf30c37f3e0a6633c9f7b90800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:54:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x15, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 17:54:28 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) sendmsg$inet6(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000012c0)='<', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x369) close(r1) 17:54:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x150, 0x150, 0x0, 0x240, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00', 'syzkaller1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 17:54:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 309.477174] IPVS: ftp: loaded support on port[0] = 21 17:54:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7d, 0x0, &(0x7f0000001140)) [ 309.554735] xt_ecn: cannot match TCP bits for non-tcp packets 17:54:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={r2}, &(0x7f00000004c0)=0x14) 17:54:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x10080, 0x0, 0x0) 17:54:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x80}}, 0x0) 17:54:29 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffff1a00a26965678270080045"], 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)="7f49b6b64c6de85c374703cfda6e", 0xe}, {&(0x7f00000003c0)='I', 0x1}, {&(0x7f00000004c0)="2614434e0836bd288024650a9f9ef6676b0d68a065b614dbb22c4e54c90b6a7a36edf206af1c831b6c11aae8b656b3f876f7b757b4e527357606ca5957e95266690c", 0x42}], 0x3) 17:54:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, "b7"}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0xb5, 0x9, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0x14, 0x0, 0x8, 0x0, 0x0, [0x0]}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @sack={0x5, 0xe, [0x0, 0xfa2, 0x0]}]}}}}}}}, 0x0) [ 310.112892] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 310.123176] TCP: tcp_parse_options: Illegal window scaling value 183 > 14 received [ 310.473700] IPVS: ftp: loaded support on port[0] = 21 17:54:30 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x2a8, 0xf0, 0x0, 0xf0, 0xf0, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {0x6020000}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x60}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xffffffff, 0x3, 0x7, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={[], 0x2e}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x6, 0x7, 0x5, 0x0, 0x20, 'lo\x00', 'macvtap0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7f, 0x3}}}, {{@arp={@local, @broadcast, 0xffffff00, 0x0, 0x3, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={[], 0x20}, {[0xff]}}, 0x3, 0x4, 0x4, 0x8, 0x0, 0x2, 'geneve0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x110}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000810500000000000000ffffffe900", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000200000008000f000080000008002e0004000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00128009000100766c616e000000008c0002800600010000000000100004800c00010000000000000000000600050081000000340003800c000100da000000000000000c00010000000000000000000c00010000400000000000000c0001000000000000000000280004800c00010000000000000000000c00010000000000000000000c00010000000000000000000c000200000000000000000008000500", @ANYRES32, @ANYBLOB], 0xc4}}, 0x0) 17:54:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 17:54:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1e) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0xb, 0x0, &(0x7f00000000c0)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 17:54:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/40, 0x3b}], 0x100000000000017e, 0x0, 0x0) 17:54:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000024000535d25a80648c63940d0924fc60100002400a000200091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:54:30 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850400"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8}]}, 0x60}}, 0xc0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf251a000000050092000300000008009a000000000008009a000000e3ff07009a000100d20bd1cc7e91988b00006fb9cf8b45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000010", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d01000008000200060000000000000000000000000000000000e413349768af442c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@ipv6_deladdr={0xbc, 0x15, 0x200, 0x70bd2b, 0x25dfdbfd, {0xa, 0x20, 0x8, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0xffff0000, 0x0, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x107}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x3ff, 0x8001, 0x1}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0xfd4, 0xb8, 0x3f, 0x400}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf4, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0xa0, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010102}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xda4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x15}, 0x4050) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850400"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8100004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x40010) [ 310.817586] Unknown options in mask 60 [ 310.827025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62615 sclass=netlink_route_socket pid=14348 comm=syz-executor.4 [ 310.852353] x_tables: duplicate underflow at hook 1 17:54:30 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x51, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x4, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x400443c9, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:54:30 executing program 2: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000004c0)) [ 310.885208] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 310.914253] IPVS: ftp: loaded support on port[0] = 21 [ 311.060534] IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready [ 311.083223] 8021q: adding VLAN 0 to HW filter on device bond3 17:54:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000032000305000000000000002000008000100001000c0001000800010062706600"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 311.107462] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.184563] bond3: The slave device specified does not support setting the MAC address 17:54:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffd, @broadcast}, 0xfc7a) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4790, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r2, 0x8}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={[0x9]}, 0x8) [ 311.611553] Unknown options in mask 60 [ 311.615688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62615 sclass=netlink_route_socket pid=14360 comm=syz-executor.4 [ 311.639762] x_tables: duplicate underflow at hook 1 [ 311.662220] IPVS: ftp: loaded support on port[0] = 21 [ 311.800345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.868467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.879763] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 311.917385] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:31 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 17:54:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xc7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x1, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r0, &(0x7f00000003c0), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1, 0x3, 0x7f, 0x8, 0x2, 0x6, 0x800, 0x39a, 0x38, 0x2f4, 0xf1, 0x7, 0x20, 0x2, 0xec, 0xffff}, [{0x3, 0x3, 0x0, 0x1, 0x2, 0x8, 0x80000000}, {0x7, 0x9, 0x7, 0x3, 0x3, 0x7, 0x60000000, 0x7}], "0f6931db1f313470de0924312ced7f932bdbde97a6b100b7771b5b9317fa86154a797e0068673ec21637fa8b3e504e7d6510a9d989c35adcdd2aef88df7cddfcae2c6f330b8f2342ddae63c560440355d5a9b86e9ab25a827f6a7f69a0529ca1d23443ff4ab12fa7ef13abd2693117d3f50e3aba2d02a25e5d0cc5d390da748f24c4581b8875112a1929d0e2633b182b309d4590137b5ea5a3ac4d4e2724ff7d9639d6f656bbd2f59b3f938e2b478c0f587bc6a4e7198e7ed30134c42c9af4131c9ccc5084fb9094c2fe0bccc0876425acdf46d347625f6d5f860305763ccca772ccd50aec9a", [[], [], [], []]}, 0x55e) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x4e20, @broadcast}], 0x10) sendto$inet6(r2, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r4}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="8f1ea3c8e2ed6e6d83f871f8341b654f665a26d68cb387a6bf9e24e809896e6a49636d19ca89a7305a6a7ca752e6513eefdfd1280c10413759425eaeaee396c60010263b48610deb48862ef76614487945fa5e3a174c4e7cc88a288f3d2a99dcae8d78e9d6d59cffecc6cb50b0de23188d", 0x71}, {&(0x7f0000000180)="0a8a2ca6e2fe1bd782a41cff15e1b6f3c9836b0238bb26fdadf48e410968e0a86b00cc241b2a359d61b97b2fd548b5f9ac7b675aecb252dbda7c1e1c03da071d684646286cd9ba845dc4a2c93c58e68aee4aa794d228c103312cf9f1b34d4be00153d3e03ad989478d778d186c88f75256abc14f1ad068fa29a33dcd3b08d080aa635e77", 0x84}], 0x2, &(0x7f0000000080)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8208, 0x6, 0x3}}], 0x38, 0x800}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 17:54:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) [ 312.122382] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 17:54:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x80000059}) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r4, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "a478ac0e649d19e8447b3c7815"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 17:54:33 executing program 4: r0 = socket(0x2a, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xf0ff7f) 17:54:33 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="008b", @ANYBLOB="ff830a00000016"], 0x4}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) 17:54:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:54:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000009c0)=@updpolicy={0xb8, 0x19, 0x305, 0x0, 0x0, {{@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, @in=@empty}, {}, {}, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) 17:54:33 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:54:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="17be10aa648b2aefa3ccfd71182d405e827390fe2be0cb7056b0cd5eaab998f7b473167a7940204a1f4c333d2f45c23acddcd20f880c71b7ff3fe478b58697a2b63d932c14e812a6b8045b66f1cc6d7846ac04bd5683b0901f0b4ac6ec81758a05e9da8eb56d76badfdf1e"], 0x6b) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/106, 0x6a}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1000000110001, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) [ 314.450754] IPVS: ftp: loaded support on port[0] = 21 17:54:34 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) 17:54:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0x0, 0x0, 0x0, 0x1d8, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 17:54:34 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) getsockopt(r0, 0x114, 0x8, 0x0, &(0x7f00000000c0)) 17:54:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r1, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24}]}, 0x38}}, 0x0) [ 314.670015] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT 17:54:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0xd, 0x6, 0x5574fa386a54cd25, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17:54:34 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) [ 314.754159] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.825918] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.834801] Bluetooth: hci1: command 0x0406 tx timeout [ 314.837945] Bluetooth: hci2: command 0x0406 tx timeout [ 314.840332] Bluetooth: hci3: command 0x0406 tx timeout [ 314.876356] Bluetooth: hci4: command 0x0406 tx timeout 17:54:34 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="240000001a0007041dfffd946f610500020000e8fe0228010001080008000300ac14140d", 0x24}], 0x1}, 0x0) [ 315.210509] IPVS: ftp: loaded support on port[0] = 21 17:54:35 executing program 2: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x88}]}}}], 0x18, 0xa8980000}, 0x0) 17:54:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) 17:54:35 executing program 1: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x100, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000600)=0x100da6, 0x4) shutdown(r0, 0x1) 17:54:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 17:54:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:54:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x15, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4083, 0xff4}], 0x1, 0x0, 0x0, 0x7115}, 0x40000021) 17:54:35 executing program 2: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'}, 0x18) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000240)=0xc) 17:54:35 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 17:54:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x89e0, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @private}, {0xf, 0x0, @empty}}) 17:54:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000140)={0x0, r0}, 0x10) 17:54:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d040000000a0000000000000000", @ANYRES32=r4], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x39, 0x119, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x20000800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x46f44aea}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0x8, 0x0, [0x12, 0x15, 0x0, 0x11]}, {0xb, 0x0, [0x3, 0xb, 0x1f, 0x0, 0xe, 0x19, 0x10]}, {0x7, 0x0, [0x14, 0x2, 0xc]}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x54}, 0x0) 17:54:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="c08d22f40db4a5713a6a43dc092e73d0505afd90d71983e828b25c75482b69a464fcf05ffe8d0fe61bc39dbadce043982796f693a33f951493fd735d8d4631643ba5d34afd50f64e43a05367ee5fe370c12327920f1e626126f6e3a2828310654a2463b8a173c1d7d8f50be5ab2482541196755d6a9f60c3e79e663b3ceef5b37a1ae10eae916c0f6a7dc1ebe95b9ff8b5a6ff01ac069e7df107bf540947f6a20c5107e62c5d9bf6c285f459b7264c7daf43ae542b74019e1298bdd6774c0cc2212f4ea45365fcc54615b09e69449031"}, {&(0x7f0000000580)="b6cadfad1154f88e9c06f61830b8b2e1f75c4067061d34523bc8a7ada8debb4a8393c20557ab4640a3c46f827f3858c76ae6e347405c92ff27c1fa9eba09d2ef09328f05e2bd0065520af8de89c805861dbee92d29155a287deb4490a399881e42205f27bd573cc36d1ebd7e0924c3007ce1ae7e08cdb941885b3b8af8f98dced6f98b7762ae99639a7f317dc50e76885f7a51ca5083c1aff616888fb869e99f31c14c3f71f25281ac8e5c853320f73e4126e5697c5a6b4c909767980484f20538dcdc024c4bffe30452b1875b5d09cc468044e0104a3fa405fd6e50"}, {&(0x7f0000000240)="e0ea676be0d9f1ab941053a8da47863d58d23c8484f33e2ed1802217f4bfde31a6fb9647109c8e7cdfbb567fb305c9fef64d88b5801c8694beb7797d41e4c45add62ef03c991de0fd164b7b669ae051e335334a6728509377c4ef42a22d3029542c6a37bc0c1b2ce9d83916067c4c03e6e94e2f8edf44f24d9c58e9a896e84d2faf264d70c23de61cf9187b997507dcac2a08898c5bc1dbaa459b7b9f0562c26c8b96b006516c5eab0aa50110b4b851b81dc8a9ffcb1ccf2756c"}, {&(0x7f0000000380)="cd"}], 0x0, &(0x7f0000000680)=[{0x0, 0x104, 0x40, "f4b459489dbed1335a35900c5e8dd1f5acc9178be181bcfafc7acdc9d9d6c9cbd3aa573d0389d22a46ec9e67"}, {0x0, 0x108, 0x0, "e2a507072ee226890dd39b6a2c72825d2943b9cffc914034d5fdecddfb9ac2729c486b92a5690d6e18ca6fd9c03f558d03567a195067c817f67768abc8ffa3532633722346e9c8ff6f204e35cc4109c08bf98b17d268888b033319f2b3735fc83544841e"}, {0x0, 0x10e, 0x5, "952c9f4007d6636c07c7219288059cf439738f0a41ecdec1e0bba6ca412165c95632cbde2a57319d98383461760bc74d55628df070025e5d69"}, {0x0, 0x100, 0x80, "a9c41272a5efcb141e7425b36c9081bab132447f64a87bcad3a528c549a6274e4c2c5e223cb224c57cd39b68fde68e8a97f8fd2a1b0cda1970c9936d90ffc5c7b5bb56241461c1c560782d378f0034d9df5039e604e0fa30bf07e3172d2f3328c8b624f8ae18c63c840a5e34cf9d9b350b51a9209db9081ee31c3dc1a8db19a2d7de350174071c4f61dff91b31904fa17afd54b97a9f51d472780e80e734377eb1c84ce6364fb5e90916b6a874a165ea36ace3bc31664ab9564a86afe44d2983b3"}]}}, {{&(0x7f0000000880)=@generic={0x26, "d0dc3c3ccf83b61ec3867a265b86fce97deff4ac91d5ab953b5efd8b8f9cfec8b959fc5dbd392996544ea2e366953f1a81fbd513f9a77fad5293eb0d3bbef1b9342a5d73f4904748a3d20cb38b528c0907ac5984d1df8bf7d21aee16009cce988d9d55c906b01cbde5dcd402a18f3e742301c2a2ab453c52b4e40c620640"}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)="168ab26666a63520ad46e1e255b8d68cb100cb54bc03d905ae193bc7665c1467213708ffaf4679db0c7b96cca71d0502f7d1c518af37f19266d2356ffebf7ea2d79370a0b80cca40dbc7a69fe382ee5cd63c40e2d0b8ee9ce8d1580e5473628c3b3eac94eed5f30aea20167b9814d2b85a34e7c8ed17912f5228b5f10df84c2cb9bc281cfdb449d6ff9b8cb5ffdad332b75520ea7e35b9fee3d223859f3da42266cfd8be7394ab7e4cc15cdd0888445387748fa2b1225782bcd519089fe2b73f5a31bfb6734954802f108cf787e6d46b644a58fd4e0fc56595b82747c67c97b79a71afa06cb378e53037656525cb597b8021374db4"}]}}], 0x37, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0xffff, 0x8000, 0x5f, 0x40090000}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x58) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:54:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000c00)={0x7}) pwritev(r1, &(0x7f0000000500)=[{&(0x7f00000003c0)="2bbdeab826c155e16ff86eb6da155cae6021369a6ac1ce79b250cf3006fcfc66303e8ece90434a61c1fe0f2deb793cfa72dac7ad093fe1081814299fa348cbe31e566127369ab4d7e46b568d7fa10d0c8674d76c28303730a1c0ce449c554c66d110a3b6289885", 0x67}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) recvfrom$inet(r3, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 17:54:36 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r6, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, 0x0}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x54, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r8, &(0x7f0000000240), 0x0) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 316.437016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xffc2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13c1c00]}, 0x48) 17:54:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xe}, @struct]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 316.555096] batman_adv: batadv0: Adding interface: veth21 [ 316.566099] batman_adv: batadv0: The MTU of interface veth21 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 17:54:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x0, 0x9, 0xcdc}, 0x40) unshare(0x6c060000) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e002e00030000815e510bef", 0x2c}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) [ 316.710708] batman_adv: batadv0: Not using interface veth21 (retrying later): interface not active [ 316.760239] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 316.781661] IPVS: ftp: loaded support on port[0] = 21 17:54:36 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100, @dev, 'veth0_to_hsr\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'ipvlan1\x00'}}, 0x1e) 17:54:36 executing program 3: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)={0xfffffffffffffff8, 0x7f}) [ 317.003945] batman_adv: batadv0: Removing interface: veth21 17:54:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "fc"}}]}, 0x13c}}, 0x0) [ 317.066790] audit: type=1804 audit(1599328476.657:121): pid=14628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/133/memory.events" dev="sda1" ino=16382 res=1 17:54:36 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000280)=0x3f000000, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) [ 317.126171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x315ec, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44a05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) [ 317.185523] batman_adv: batadv0: Adding interface: veth21 [ 317.194692] batman_adv: batadv0: The MTU of interface veth21 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.229017] audit: type=1800 audit(1599328476.687:122): pid=14628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16382 res=0 [ 317.301668] batman_adv: batadv0: Not using interface veth21 (retrying later): interface not active [ 317.337431] batman_adv: batadv0: Removing interface: veth21 [ 317.362483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.384521] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 317.401964] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready 17:54:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18}}], 0x18}, 0x0) 17:54:37 executing program 0: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) [ 317.414417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 17:54:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x1000) ioctl$FIONCLEX(r1, 0x5450) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x96, "968ba67647729152ef5a998636fc180391acc11cf9e79a140a8ea0b069200515b31bf82b4e37fb886e88cecbb4966842c1ab6dc7faf6ad1bc670e5b301cd4fd39a4df1dd7c408bba15cd557d6b7e12d8e167815ba3f9e1b9361f85ddd78cb92d270d9cb3093b9af2193f45512fc96d43adf42507efe4cb5932fee78d44b25790a7dbf0afd95544b5314b6c11dc5eb79ffac04dad32f2"}, &(0x7f0000000400)=0xba) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5f06ee7ee18f208a}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="00ed0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) [ 317.486363] audit: type=1804 audit(1599328477.077:123): pid=14717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/169/memory.events" dev="sda1" ino=16401 res=1 17:54:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @func_proto]}}, &(0x7f0000000040)=""/233, 0x32, 0xe9, 0x8}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 17:54:37 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="075342778d7aa9dd02a420ad0738364337bb93901360c5e199554eef19a08f99a5d5f0b8a52a8e11b05db3762706991a2aa9d5e15d33a8e97735cf37ff1157013a673b68922806ff827f", 0x4a}], 0x1, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0xd0d5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6f}}, @mark={{0x14}}, @mark={{0x14}}], 0x78}}], 0x1, 0x4000001) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 317.574809] audit: type=1800 audit(1599328477.107:124): pid=14717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16401 res=0 [ 317.585946] IPVS: ftp: loaded support on port[0] = 21 [ 317.693607] audit: type=1804 audit(1599328477.107:125): pid=14717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/169/memory.events" dev="sda1" ino=16401 res=1 [ 317.816932] audit: type=1800 audit(1599328477.357:126): pid=14732 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16401 res=0 17:54:37 executing program 4: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000400), r2, 0x0, 0x9, 0x0) pipe(&(0x7f0000000280)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000a40)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x77, &(0x7f0000000240)={r7, 0x0, 0x0, 0x5, 0x1}, 0x14) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 17:54:37 executing program 1: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 17:54:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20040804) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x0) unshare(0x40000000) mmap(&(0x7f00000d6000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:54:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) [ 317.967086] audit: type=1804 audit(1599328477.357:127): pid=14732 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/169/memory.events" dev="sda1" ino=16401 res=1 [ 318.128836] audit: type=1800 audit(1599328477.387:128): pid=14745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16404 res=0 [ 318.208960] audit: type=1804 audit(1599328477.387:129): pid=14749 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/136/memory.events" dev="sda1" ino=16404 res=1 [ 318.236017] audit: type=1804 audit(1599328477.387:130): pid=14745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/136/memory.events" dev="sda1" ino=16404 res=1 17:54:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000"], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000140)) 17:54:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f00000002c0)={'wg0\x00', @ifru_ivalue=0x4}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x80f806766c7df7b9) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c0500befa58a72e61f269528980891c2a304f0fde959d1024004d651676d51783d48e94e51eb7484f7352fc128521de9fc95b9ba3569876258970d55a9035cd351f26a0", @ANYRES16=r3, @ANYBLOB="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"], 0x51c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x246d}, 0x90) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @dev}, @isdn, 0x1f, 0x0, 0x0, 0x0, 0x700}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000280)=0x10001) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) 17:54:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 17:54:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:54:38 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket(0x0, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) listen(r3, 0x100) write$cgroup_int(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:54:38 executing program 0: unshare(0x6c060000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'team0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000040037f8d00000060037491e7efdc99ab8b98a37125b219812d3a61ba4e943e4bb5df6773b03835d9455399f022a9cb6fc6a1ec4e0c8d45be02a91ee9421122e52e8e1d8fa12be3dbce1ec89bb7dc68d5c0a2d402409c71c5afcfa978f2db824f9e7cd58a8a2ae82725badad85a4a777fd35732c6bd79a67a839c5b2c7a0fd8a0a053d16a467352073be4f23c766002c41bb5dcb596aa2a07db25fa9f6f88135a125f2cdcceca7d6dc649b3f5b6f08", @ANYRES32=r4, @ANYBLOB="000000000000dfff270012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}, 0x1, 0x0, 0x0, 0x20020040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x7, {0x2, 0x0, @loopback}, 'ip_vti0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x0, {0x2, 0x0, @remote}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, r7, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) [ 319.059396] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 319.094363] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 319.103816] IPVS: ftp: loaded support on port[0] = 21 17:54:38 executing program 5: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000080)=""/106, 0x6a, 0x40000041, &(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x1}}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 319.116631] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 319.136845] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 319.161233] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 319.175788] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 319.183610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14819 comm=syz-executor.0 [ 319.195441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.206845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.216742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:54:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 17:54:38 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 17:54:39 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfc}}}]}, 0x78}}, 0x0) 17:54:39 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 17:54:39 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0xfff, 0x4) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 17:54:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026000566d25a80648c63940d0424fc6010000a40020074070200006c37153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:54:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18}], 0x18}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) [ 319.522872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14872 comm=syz-executor.0 17:54:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@bcast, @bcast, @remote, @bcast, @netrom, @bcast, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x80800) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) accept4(r2, 0x0, 0x0, 0x0) listen(r2, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r3, 0x1) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0xff, @remote, 0xff}}, 0x24) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000280)="b341698b3141a5df4470329ef89c040da1e757581ba24bf8c7156d2e621de11d539b532339e5d229b8b0cf03c1f23ece05f21ad08bc3e643bfbae61ca6f582d59db1b2491026a2510e25f8be832b63e8078319230afde75beb29044af3e52503d1748529791cb0010cec97832b", 0x88493c4140854681, 0x140008d4, 0x0, 0x63) 17:54:39 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) r5 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r5, 0x0, 0x2000000000a, 0x0) [ 319.623950] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:39 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000005c00), 0x4000000000000ac, 0x0) 17:54:39 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) connect$x25(r0, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) ioctl$SIOCX25SFACILITIES(r0, 0x89eb, &(0x7f00000000c0)) 17:54:39 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x41f809b1a7d7b00, 0x0) 17:54:39 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 17:54:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x12, 0x5, 0x4, 0x400, 0x0, 0x1}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 17:54:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) 17:54:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a72ff58ab16f88b9663da5668b145e6313c17b22b9e79c9258687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9f11b0000ff7f0000"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1, 0x5, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7d, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x4cbd, 0x5, 0x0, 0xffffff00, 0x8000, 0x4, 0x2, 0x3f, r6}, 0x20) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 17:54:39 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001480)=""/226, 0xe2}, {0x0}], 0x2}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000240)=0x8, &(0x7f0000000300)=0x4) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 17:54:39 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) close(r0) 17:54:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x268, 0x0, 0x5, 0x707, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "2cad6dad913be467f0edbabf27a940c97866b9925696b217e4f7d1766b5c9ce9", "5a461bffcb7d825d5d3d5d827b8f20a64fb14d60df8c9fc7998d41fafc852292"}}}]}, 0x268}}, 0x0) 17:54:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, 0x0, 0x0) 17:54:40 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="857b4d86b69f1b73c42e9f0e22dfb8a986b084634b372c53b956ca4daf80267b408f1a7ff0a877deb0fc177d251aa9ab0789938db36b49ebfb557cfdabfee502e5c455931ba1e7e69e8e54"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 17:54:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) pipe(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) 17:54:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0xfffffffe}) 17:54:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 17:54:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)={0x24, 0x26, 0x101, 0x0, 0x0, "", [@generic="0077a8f7dbc521e25df6b950914aa0a7a2"]}, 0x24}], 0x1}, 0x0) read(r2, &(0x7f00000000c0)=""/197, 0xfdef) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 17:54:40 executing program 0: bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:54:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x54}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000040)}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, 0x15, 0x205, 0x0, 0x0, {0x23, 0xd601, 0x9}}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:54:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r1 = socket(0x10, 0x80000, 0xd1df) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x4, 0x81, 0x3f}, 0x10) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 320.899491] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 320.950542] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 320.991782] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 321.042369] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 321.069603] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 321.100821] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 321.141458] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 321.153199] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready 17:54:40 executing program 1: unshare(0x68020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000280)=0x407, 0x4) 17:54:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 17:54:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x400, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0xa4f}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 17:54:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x37, 0x0, 0x0, "aeb39c5def1f"}}) [ 321.186120] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 321.253662] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 321.296454] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 321.331345] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 17:54:41 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f0000000040)) 17:54:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x3, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 321.402600] IPVS: ftp: loaded support on port[0] = 21 17:54:41 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) 17:54:41 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) bind$vsock_stream(r0, 0x0, 0x0) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept(r0, 0x0, 0x0) 17:54:41 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x8100}}}]}, 0x78}}, 0x0) 17:54:41 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x2, 0xa}, {0x0, 0x24000000}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0xe8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@mcast1, 0x3, 0x2, 0x3, 0x4, 0x3, 0x68}, 0x20) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newrule={0x30, 0x20, 0xbc155b926d363b35, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_virt_wifi\x00'}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newrule={0x30, 0x20, 0xbc155b926d363b35, 0x0, 0x0, {0x2}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_virt_wifi\x00'}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newrule={0x1c, 0x20, 0xbc155b926d363b35, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) [ 322.022541] lo: Caught tx_queue_len zero misconfig 17:54:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) 17:54:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$llc(r0, &(0x7f00000003c0)="b16c19727b5145c55a83f8c65ce6792638774313465fe16df9010183be160a0b333d2ea4a64ac1c1d9c4f17c1c0f093f2275200eeb5ade6feb2ef578b5704a6cc600c5bb02f749316d9e46f667d21fba096df5d45c2dde1547e0bff8ac44b7514ded39fdc849dc09087b75877710a17a4eed0ffade0615f2a471321531a6cd74337d8edddbc79980056db3979dad33fb6dff469c0b2ed77ff0b40f1d26ee88c0b20715796757d6a5b81be6ff3d4e825fb57cf33364dc0197fbfb73d0e931a3", 0xbf, 0x20000000, &(0x7f0000000300)={0x1a, 0xfef0, 0xfc, 0xff, 0x2, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) 17:54:42 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:54:42 executing program 4: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x347, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8124}, {r3}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0) 17:54:42 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:54:42 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, &(0x7f0000000300)) [ 322.851548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x2, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x1000000}, 0x38) [ 322.930639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:42 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) [ 323.015218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 323.048911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102001301007a58008000000b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 17:54:43 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffff}) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 17:54:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240), 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 17:54:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000006190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 17:54:43 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 323.756678] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 17:54:43 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff109e1a00ab343fda000a00000018000000140009400000000000000000000000000200000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 323.827831] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 17:54:43 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) [ 323.888659] audit: type=1804 audit(1599328483.487:131): pid=15121 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/179/cgroup.controllers" dev="sda1" ino=16438 res=1 [ 323.925407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.517940] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 17:54:44 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[], 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0xfc, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6204}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x494}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}]}, 0xfc}}, 0x0) syz_genetlink_get_family_id$fou(0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x24004050}, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000100086e00ed1c282636e8bb4a59f4ee6767e61082c6ebd337d91d6773e81a43f5939e14f1bacf59b5bf027edf6d90486f90bec5e1e9b608b7dcb8a04ecb707d01413e4cb0bf059778f090c278f2818c8cb0e36f92bdf85569aaed71bdfb91c939090fe382faff5c09", @ANYRES16=r6, @ANYBLOB="00002bbd7000000000000a00000000040003801800028014000100ff0200000000000000000000000000010c00018008000900760000000800050000feffff1a0e80365380856136202d9085c315b3f9cf6f660b6e2e59bae4313721f1dbd782179b75b225b4d7e163a4b6c33408857f2e4ad85108fe1f0eeb25e3f08df84e79b4ba86eb6ac0ae262291fd72d7159a6f79235c5904d2bae4782baae48e8a6a24d1d9c34ac426d2f61813ede9521fa1a2800d0877040c4d055c3da85bde0c58d690bfd212becbc91168cbf006b82e2a10451e58fc2fdedae017f50fb44102f5308748fb9eb59369490870c5da406a615fe7458b29889b5492005543507ee69be0d1093ef0cd9209edccc55bb0b53ed4d1d0139358f2b98a367b6fcd6dc87f5c7d757998ca89091013384d6959377c8ad386b6322f6c9f15d0662fc69b872705daf8e0806c3e0f94a5b674f98390e9590ba836895432b52621e55d1948d25c051ef62692e3e46f91d7e06f8a80dff594536f952e7de082b62143fd9b450592"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, 0x0, 0x20008801) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000580)="1ee7f5c114f301897833b4ee5be81e76b0076a46b2f7468ac5628e1a4502b57bb5f20e619b8a81fcb84e9ea4131068bf3aed3b7f0e007ddc92d0785cccca837fb113143bcacf5837ecb45ea8cec8471e0d89d488e6d3c581377665cd9521f2be87e400768b0b1de3b80e0aa35daadea65ee311e7250176bcf7c2a2acf8c1599c8dca183eb4d5337526f9d9e845777c4a9aaaad56d2312b5fe498fce90a66ffadc8d2308fa680da948fe4ea290f5c7fd8e9b3ea5e7903e5d594493ead330bb69afbfe0e6b6abb875ae494983d07f6ad0f205c78e766519378c4e107daea6c96e9a4670308823ca2dd0833422d9db3994f3e7d334239a907c30f07719b225ab969f2f94f771caebc2a93c7eb7e3b1bc89cf230e44b16c1089a3650854aeb790527e2ed4cf2423ae96d49341984278612080fa8e37f942157bf6c91c5624514d54a81b13f59c05b2fa88691e49febd3783222666f2fdef3c186d2351aa606799e81ea0fb2e5ec9fc177a5bf680a2d762ea95132d0f6a03c26ce673432fa6e2a3dc43382ecce2ac519f2c6b46be91be490c2f8fcb9a6e8406c539141dab66863cbff550b2c87cb28579e20aaa73cd3b31fe5727fa1ce0f3553eea94404c7c57eec102cdeba890c61a16a193dc547cc0bb4e47fa3ff2a4688595ea0b11ccb246738dfd6a1c3068d96bb66a5dc78beb2e393ceebca4f0732b105066a1c245ee81c73d596167c0fc3e951dcac688e3409540babf69ccec8bce750e45b3c4d6e62e0a5e29bc0125425dfddd6be09a325363b9bb828e6fe6872b56058f1132fef1c61c1f236c5a06b27537d71a850d604c5219eb4df9057354cef00e70309da12e213d9961917278423df7c3ab98624768f25ef4e88555564dc322a87d934d9ad0de3f1e39c5f946b802139de1d05d9460ad7e978b26f01facea7a2acc23f1137b39f6442d60d38847641775907f0e9a97fb082d8882993135a90a98e1585783d5dc572a7c973f52cd92d190cfdb4e76171a4244af33ec5e08b831e992cbbeabe0826a842ae97e1b3007afe805879996243a1b2d38984f79638b8f59fffa2c58325b1905ba01c59f6880d4694eb554634ba67f55d888174f612a9bfe525eb15c140bfee07a90507398443413579f37a54650fefc53f14a879a5b857a1b8c6e38e91cc2540202cef81a51492698c3440cca2b6b100706a07da142f168d7819ebf95e7e8b90ae2f0873e3081a94aeef87152dabafccc7fd633e452b7ab28a3ed00ff0944cd23cd547989fc6a073bbf3b8013420eb018c7fdf288cd8e1a570e2671e5adf216b29f1c9c256fd50293da7dffd0b2cd186a8463c177738c74a8f2297ef231d316ce83b0f80b31c084f4d7d8fa5b38b6fc3d99969966900fb80412faf568caf6858cddf0df0a6a475e54e97a406a399e9a03e683ecaf46dcd8fc1333001c60fa107deb60bc3be8f57164aa6de9837459703db42ea692cdcfbf0d9ef1c0bb2a678223b430a8158b413d823eb32e2cdf4a46daaa92f4dc2dea2e1e695bf9fbc9defc666031a350f611ffd7e31849571249b110b6f342133aa1bfd85b19228e9168c4716ed79cbc3660bc3f5074ef54d6a2a812c7cf8c45a34ed75d0fc5ee9f6d28d4a8cda52881d230238bc2d64074a8b4d74b93a3eba4d001f9287eae3d563f61221c62ceb067b0a4989f547e62c40f89401fb812715b256e4533218b9c110e4c2eb9ecfca5ff7f47280d0b3982614136cbac13da0ecb2dda3e183272b9d88a56f0b236d05eab7a2df18861b75b92d75271ac8cfdadb98485038255fcf58a507dbbfae77ecb40b6cc6d480abddafb148e82a3172c96654681e6c9bc2e33c5ea9ec6076d06fc49645e8f9a5c1508eb0d7f16b6001239604774e3f930da93b08753653058c5d30c8c05ffa5b7ff803406f71784a5e9953ee05011e9f43b4aa4701803b2d6565bd2e793f0652cbe64d90de7315c88be38c74824b31ae0ac98eb53b72d38633b57c079c6966694b50c3f9e597cd5e3554f84175c4baff9fbcf5d46fcc6da1a8bce3cfe069acc7c8b7868c14f6828bce0600359297c1a2e14045abcc89423004f40b1eccea9343b92ee66cbfb18ae8020d108b71a7fdbfa1c388bb61e5a88f09d540b353505ed53b295fbd74a6fb8b029692c2984750faee3ad0994fe1510c919130d9e8728ee0045dda84768e8305eb8e64edd2b656f7179b00cde3b5d06540f27c825cb76cea2b6897c8cd6dc6fae066d8c591c62a295417dc3d1830bf4b6df2c93a7a5c9cd638134dd4f11675bb4356519d954f212e8c81be12e276502e552157e3461b4bc57edcecf0de045b7e17ce92992a6918f56ed799f40900af58d30d3c41875a6e1ce1ec968359a91c7db681775ba97e50fc29ea0d61e8abfed0796b6459617243eb84342d1a6f80d7ddd5c9ef8eeaddee5e5af1a09c185b0c6f0499ca6641558cc9f0d68eb0d64db5be28c84f3f0b42bb8fa1a324b9fa0a3d643b8a2b338daa632a23a90d1408d69ee3cdc42340d3e6d849b8118c55d0956c287608129c0c223d97e11b7ac92d50ddd334a64486bd3ca4a799c56dbf47612d53d04b85585f52870a8f3eb013399d770e062ca559253e3a9415c8f13c37d99033ffcb1e7aa4aa4d459e0d45526533f88e25498a128bb382fca690b954b0b1c5eda8f861bd646ad0cc0b3c3307fa0ca7c2f8bc75bf02b3b70ea9bb3a96dc3f7b2ceddc64d882230fd946fd8770e67461b07c6912b38fc7ee7cc61cf50cbaacafa9dae74938baa4d9d0f42c2b7dd260f55d69cd59695a801286a02e7b2f9babad3c4392f869cdf130ba44a7817f102d249753910d4cb1720496927f8bca22aad4e974a5d0eca972ab06e0659c0a50c76873b833cca0f848a902e7197d7de17677479fb19304a97fada0003e9da14b52213b2f773ea433cec51ed827c746526f80e1c83fc51071507f5ed580322c70d14a2f61e0d6f7ff5c1229cd18f911f9e12c81e446e0f9aa841375bd748565e3336592ca918eb7c1f4a53b7f6fa79433b740891f552272841a938659801430e334b6b07b0ce53374ba61e7670c0916bdcb72e8b4743ed1766e9de27740830803a2395c93c5a1f69eac4c63f1233aa0a0a5bfcfa245a48c102c9e269013f1e6232f68f2ff2b85de88dcd36551b33e0df4238f4b7fc1b0a085a64590638d1e5a33f629c50bd52b23d3e6e69e92de9c8b7fbf86f8a48fd295a7208ee5832902e5733f278b6aec017a6af96fd5f0edc684b64f98e2de1d8d2d123b342d371434edfdb8544c118f3f7de298de0791a1dab5fd57c226d4f9dd80fabf97b5f466d79d94082ea9a9187ed1522de02101fa392c37ae3685ba8d1364a1638736d2da2d02e898c5fa450787b3df83cdcb874aca56fb4f5bdc9bdc2e9ad9fe8c8656fa38d4e4108a743064dce0ae29c12d4bc7405b91108787fb01644486fbc4f025171f43b434d978155ace6410b002b3ab687dbbe293d63927b13f46a0ecf2eb713776a0d49933e4182d583040922944b64968a197e81d10ea61e9e94858a8dea185ba39199ce58707f481b2533db5ef4c9d23fb99af2216a16fadae47e2c02d9b194e82ffe1700261b643625c959d54027835bc9223e90172b424bc1e43c963011c6b99e5acad01af3887e7ae25c2d55cb343cf98abf597df0af80d6f125223af1320ebe321ef16b7e1468ff2ff5629358030fa4769f1a34f79042843fe34c0869d048af49f21efb9862d0bad4b656e4f50580e785fdf64abd80c30338c23ce0924eb15a81d8b8a53d98161689e1c65ad1d418b4465f253b3f5744d312e8797ae7ef4b02ddc3fe967d2f964a1982492091f291825e1b6bdbff55379e92326c02831ce60ee4726a0cab569013b4627715b18ccaa581423533a3b9fdd4bd31883c5ca7a4bd64e98991dd0945da4a93f10eaab9b78048b849afc46c6f821f0202c30cfa5269ed30bb5db43664c5a9446b251d6baef27bfb013480643538efabb2d68f35f58ecfa15e82df792ac98f2a91b1740295fbc75f72cc360d80c8ef3b625627b0d77c5c271016d0a2dccf356b1e4014c9ea0aa6a1994a58a76edaf81e4da523765a43a6ff55c8f50f36e21b3d424ae4d22bada8c82ff0c46b44047e2799c82833d55c7cdacf0f4eb56eec81194b56fe4dae86d6b435f8430597c21005411cc85bbd594730f9b6b32c7c77b11508892e7aa2b5f6462f9767b379ac728cff76d362111b1eadbfcc546a932fcb6eead0af287cab04923c17df8504200c7cc7e6b94edb1bbe38953b7161b4e060d01644a05260b5c5ed5939a82141b59699a65280aee4facde049af4cbabd7a924a3cb95ad8a88ba750c33671b8907384c80b7e9c7778f895aa4c940a03783e6b83e7277d095f640090b004a16e1db0440d04ba0d27a43fba1fcff2044132b4a43e302c28577a626e8d813701bb874aeb4834dfe4fce9e811b6c7b4be9ecd2824dd6e65388f3f8c723706710b40c12b2eb16d64119e70867878e3137932e626509b7d54fc653d501bd658bfaedf8c5001a3444c98fcfbd0a5d81fb40cabf4c7b78298992fd7f033f85175e156f5a0bc6afd1d72697729fcb80531b80a487e4e62d961e47c5459a71904f87d5d276dcbf2084f8d1f60830e73bd4769bfe5ab9e11c2d7a9cad1f3217ad363d492c644d7c8da4afe23eb654e89c473d6693e6b6b47efba48451231330639cc38f474494facfe4ccfd630d79cfe116d7e9d01cc44d60bedbd0b571d0a4acadde04e07d8257ff3b033df11c6b45d9a228d0df7486854451bbf63c4a7fce803cf946e73d341b6a6f13d168ac1679329eb456d7671308f466d423b93ff65d322fb5828f3d7bcd3e7b3edab2e0dff2dd0c9d5fa360a5045b072e166a78a37d5eb3519110a0bc561b2e1a515d3d199872bed29628b9ec1bb1ff3591672f7a2724f12786b7b76fcd5f527cc0f8a2ba7234e2a6af08dd7cbe9ad47f2449524d2b4d80606134e4cec65fca19a2841b0c671d8143722bc03fed54d6f4dcacdf759c2b9a58a6f57a7cb9362efaff5783b4a62649a17010f4df5ecc1637978d6915b84a96beb89d2eaede837568daa663d4fe0c5f620a387a414be97defbe842ebec2f3a393d039131c8c1adf2a6fbd672db32dff65f4202e848f5864860963fd78c91b6c3daae5faceef20aa79c6e58cf75ed31a30c4f1bee658bf3604c05cf0678b866605d0dfdea06089ac4f9c9b48c85001fb7055b91323330bb0f20e70a921e9fedd56b4417f65e5d5a7a70091ad74457a5ed496a43bebff391df1a0c804640170852fed4f9d67a09ffffd855f06b195949f3d10728a3abca346a504b4f06adde29cf25bbc1b8f67d57115980b51b9d4b97eb8f38f964ad77e3519e0f55a1cc9cca97c306af1c15922999f83ab69e9d31d27db236641f6f4e3c0c0f77f5ac239bd845e10cb1cbb8e30a33cce092c34960b6516623f8215db75a2bd2d1f40d4654d93343481153a62d0e14fe6c7b516f997693f922af2f539ba947bd78ff07edae96b4991586dab11330747c4bfb7e6141158d3d1919bae4cebc42fcae9f9bd5afa97aa780986b9b63d8c3468ced5c048a15d4fd6eca42c011f647c050e6bec74fedf0050d33b6a236f0fede42adbeefa8b27ae3529c704aa36919de44a107cf48273a4bcd3d957556e4cef5a4cde7d97a025dc065563a65c067423b7c55563e3c54922cc4dee577837e22158e594e347e980fc95bb6120eb6f03878011afcf17880b10c8944cec66069887771e0ef28f879f3fa4ea570d7359572a07b325910dc545", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 17:54:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x917, 0x0, 0x0, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 17:54:44 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/99, 0x63}}], 0x1, 0x0, 0x0) 17:54:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706f164808e25ff6da900d4da55a2260c00010006"], 0x1}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000200)='+', 0x1}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r2}) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7}, [@NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x30}}, 0x4040841) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x301, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x600}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x301, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x600}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRESHEX, @ANYRES16=r5, @ANYRESHEX, @ANYRESDEC], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x207fff, 0x0) 17:54:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0xe}}) 17:54:44 executing program 1: unshare(0x40040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0xa, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x100000000805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x2, 0x2}, 0x8) socket$inet6(0xa, 0x1, 0x0) 17:54:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="883ef43657879598d185ec", 0xb}, {&(0x7f0000000280)="a0a311430cf54f0d6002b33af72bdd53dc03154f92a4c2ff", 0x18}, {&(0x7f0000000440)="23d68234977b", 0x6}, {&(0x7f00000000c0)="c02528f6926792", 0x7}], 0x4}, 0x0) 17:54:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004", 0x20}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'lc\x00'}, 0x2c) 17:54:44 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) [ 324.875482] audit: type=1800 audit(1599328484.467:132): pid=15162 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16371 res=0 17:54:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x7}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 324.977117] IPVS: ftp: loaded support on port[0] = 21 17:54:44 executing program 3: r0 = socket(0x1d, 0x2, 0x2) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) sendto$l2tp(r0, &(0x7f0000000040)="05000000c2bdeec859ea5e24fcbb7b2cf71df77abbdce461d5261b1824e1cd5926bbc4aebe00000000000000000028000000000000000000", 0x38, 0x0, 0x0, 0xfffffffffffffce6) [ 325.019378] audit: type=1804 audit(1599328484.507:133): pid=15168 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/169/memory.events" dev="sda1" ino=16371 res=1 17:54:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000200)='+', 0x1}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000000c0)={'veth0_to_batadv\x00', {0x2, 0x4e22, @multicast1}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x400c084) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000040)=0xfffffffc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={0x0, r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:54:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x24, &(0x7f0000000300)=@assoc_value, 0x8) 17:54:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x7}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 325.202400] audit: type=1804 audit(1599328484.507:134): pid=15168 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/169/memory.events" dev="sda1" ino=16371 res=1 17:54:44 executing program 4: syz_emit_ethernet(0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a00003c0000000000069078ac1e0001ac1414aa0714100e00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078"], 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r5}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={r5, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000100)=0x10) 17:54:45 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606da187000800000000000000000000000000fe8000000000000000000000000000aa00000000000890780000000000"], 0x0) r0 = socket(0x10, 0x3, 0x800) write(r0, &(0x7f0000000200)="1b0000001a005f3814ecf407000903018000200000000000000000", 0x1b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x6, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="1b0000001a005f3814ecf40700090301800020000000a20f0ac100", 0x1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="90f8ffff2b00270d00000000e883bf3d0000000046cedc430231974982dba7abb91fc7a0431dc4d94fca1a9f59ea91688fbdb313f5cc012f0c9b80", @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500000000000800030000000000180002000000000000000000040000200000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x90}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x12, 0xffffffff, 0x4, 0x21, 0x0, 0x1, 0x0, [], 0x0, r4, 0x5, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f0000000300)="11d0485700325665d696811fb9a9b432ab7260811fb1eda6402bdf6f587882e401b87f2a2be48c711d4f45458535b49f137e9389448c9aa118ba37f606e156e16fb0b1f7aacb87d2ee3ea713393aa5282bbde93138a6061c130ea5e530bb45fbc4c831ddcd4079f1b1e78ac5706d", &(0x7f0000000180)=@tcp6=r1}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x3}, 0x8) 17:54:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) pwrite64(r0, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x1, 0x61bd, 0x1c2dc0000}) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="ce20145958f363882167505e2ab880c055183246fc6b41600c39a41ab32abbee8cbb561198601dcb75d1af3c095a795e03cae2f5f34c3aea0ad6d97f9772e8c7a3f6728c88186920dbfd297fd2baa3a6a61b777aa5f4204cd0a5f33c6cd4305d4770d94510422b32525ddabf397e044c8043744fa64796974d", 0x79}, {&(0x7f0000000180)}, {&(0x7f0000000340)="44ec5a4aa239462db1a480860702cddef542a138b47d4af70b6fe515a3bd7122cb9af2768deaf6595fdea191a16c27a41c96b64de9486cd9bb9acab25cb52429af464206a21a8c8d211d82c363c932f5d8419a9c842de7e5e84bb3de94cb6131ba027471797f6855a366229fcbb570b8c7870f27afab6e7a23f86ba50cda24add3428da9", 0x84}, {&(0x7f0000000200)='U', 0x1}], 0x4, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0xfffffe8c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='F', @ANYRES16=r2, @ANYBLOB="ff830a0000"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r2, @ANYBLOB="000027bd7000fcdbdf250900000008003b0002000000080021007f00000005060000010000001bd0c089edf1a23ca8e9a7388fe5eec1d69b88c7d712bb182c884a8a80d94336649e1e55489634d463dced55eef27a11035a938bfcab6859a824463370c47e44e703d82707c6f0c258db3093a1dc6818276918fedbcc0f0d65ff0036baf49a1a49fe6737df3fe5be90368e8292c19bafff0b71"], 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) 17:54:45 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x3, 0x604d922c171a68ad, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) 17:54:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000b67000), &(0x7f0000000000)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000007ff1028e6c467144d2fa8336f1039f938fea40fde3d2c3887175ed104ffab548940d1756f4decdd88e66c81169f7cc003d86999c29bd7d780bd8792a409c3764a0828a505995b7d2dc356c8b584fdd56750b72d147d00000000e78b240754e90d72abc2dd57434f5b6a1d72fed1785fc80792148d2e425feb7e8a1d7c06"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x43, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r4, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x24, 0x30, 0x10000, 0x72}, &(0x7f00000000c0)=0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r5, 0x11}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) 17:54:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") listen(r0, 0x0) poll(&(0x7f0000000500)=[{r0}], 0x1, 0x7) 17:54:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x13, 0x1}, 0x14}}, 0x0) 17:54:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c9", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1, 0x0, 0xfffffffffffffde1}}], 0x1, 0x40010063, 0x0) [ 326.248825] audit: type=1804 audit(1599328485.848:135): pid=15225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/156/cgroup.controllers" dev="sda1" ino=16445 res=1 [ 326.380007] audit: type=1804 audit(1599328485.878:136): pid=15233 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/156/cgroup.controllers" dev="sda1" ino=16445 res=1 [ 326.465369] audit: type=1804 audit(1599328485.878:137): pid=15254 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/156/cgroup.controllers" dev="sda1" ino=16445 res=1 17:54:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000), 0x4) sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) read(r0, &(0x7f0000000040)=""/69, 0x45) 17:54:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x5, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:54:46 executing program 0: socket(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 17:54:46 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000001b000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 17:54:46 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8000008001, 0x0) 17:54:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) [ 327.052810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.070370] IPVS: ftp: loaded support on port[0] = 21 17:54:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x36, 0xfe72}, 0x20) 17:54:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffa3, 0x3f00000000000000, 0x0) [ 327.568149] batman_adv: batadv0: Adding interface: veth11 [ 327.573736] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.599394] batman_adv: batadv0: Not using interface veth11 (retrying later): interface not active 17:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0xc4, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0x1c}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0xc4}}, 0x0) 17:54:47 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x8000}}, 0x10) [ 327.622519] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.649780] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.656250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.678702] batman_adv: batadv0: Removing interface: veth11 [ 327.743928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:47 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) [ 327.840460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.857982] IPVS: ftp: loaded support on port[0] = 21 17:54:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_test={0x8}}) [ 327.944726] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.953864] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.960343] bridge0: port 2(bridge_slave_1) entered forwarding state 17:54:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x800448d2, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001a00)={0x0, @in6={{0xa, 0x4e22, 0xfffffffa, @mcast1, 0x4}}}, &(0x7f0000001ac0)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001b00)={r2, 0x80000001}, &(0x7f0000001b40)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000180)=@ll, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/167, 0xa7}], 0x7, &(0x7f0000001740)=""/147, 0x93}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001880)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001900)=0x14) getsockname(r0, &(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000019c0)=0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf250800000014000300fc00000000000000000000000000000014000300fc00000400000000000000000000000108000400ac1414bb050001000000000014000200fc02000000000000000000000000000008000400e00000020800050000000000050001000000000014000200fc01000000000000000000000000000014000300ff010000000000000000000000000001"], 0xa0}}, 0x68000) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x64}}, 0x0) 17:54:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f7700000000400002003c000b800800010006000000300002802c0001"], 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:54:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0xfd6b) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1eb) 17:54:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x185, 0x10, 0x0}, 0x3f) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:54:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 328.143401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15391 comm=syz-executor.3 [ 328.200346] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 328.228159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.257918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15402 comm=syz-executor.3 [ 328.319090] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 328.344686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:49 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) 17:54:49 executing program 5: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) 17:54:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:49 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f000000000000000000007520041f22"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001303158008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 17:54:49 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00", 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="8fb9b0ec5a49"}, 0x14) write$binfmt_misc(r1, 0x0, 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x4ffe5, 0x0) 17:54:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000002060100000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028008000140000000020c000180080001400000000005000500020000000500010006"], 0x68}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10020100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xc8, 0xa, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0xa, 0x0, r7}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 330.256986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:49 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="f1", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2}, 0x8) [ 330.308258] audit: type=1804 audit(1599328489.908:138): pid=15436 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/173/cgroup.controllers" dev="sda1" ino=16471 res=1 17:54:50 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)='0', 0x1}, {&(0x7f0000000340)='+', 0x1}], 0x2) [ 330.360572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.426263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00010000000800fe3d0000000000"], 0x1c}}, 0x40440c4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000480)="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") r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:54:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000026000142"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 330.492160] audit: type=1804 audit(1599328489.938:139): pid=15441 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/158/cgroup.controllers" dev="sda1" ino=16475 res=1 17:54:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x100000000000000a, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) accept(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff7fc) sendfile(r3, r2, &(0x7f0000000040), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x20000000003, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), 0x4) [ 330.638087] audit: type=1804 audit(1599328490.188:140): pid=15445 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/173/cgroup.controllers" dev="sda1" ino=16471 res=1 17:54:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000280)={0x40, 0x40}, 0x2) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x3c, r9, 0x101, 0x0, 0x0, {0x1b}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x188, r9, 0x1, 0x606a, 0x25dfdbfc}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 17:54:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8}]}}}}]}, 0x48}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) socket$nl_route(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 330.679499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 330.731377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 330.775797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.803634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.829248] audit: type=1804 audit(1599328490.188:141): pid=15436 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/173/cgroup.controllers" dev="sda1" ino=16471 res=1 [ 330.861027] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.929608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.983021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.996208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.006415] audit: type=1804 audit(1599328490.198:142): pid=15447 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/158/cgroup.controllers" dev="sda1" ino=16475 res=1 17:54:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x5}, 0x14}}, 0x0) [ 331.036541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=15483 comm=syz-executor.2 17:54:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001001053d9fbf1eea4b23a87192bb3984099452b4079b6891e5bd1cd295447e777d96fe5bf8ad041e241a83d94ae77c778f298f982bd30a1a11cbfdde9a2edacd3efd9dc905e67cf782c5cf0080ae69a86776114b5131f2243c98143c6d42abcfb239d5c734237e408ff3cdc7621146e2a422560f705f3f5c6d81e5b1335bcabbae86551747bcbca0e085ccb0de949c6def3ac97cad638a72aaf66e1bc3839c8245a28bca7c023980b8c15503580d8412ac983c36571926dd"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x1405, 0x400, 0x70bd2d, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x4004044) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000500)=0x3f, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) ioctl(r5, 0x9, &(0x7f0000000180)="9e0c5f56c0e2e36ac67a90eb2c618d7a9c6f89fac4cce2ba1e34103911b65e2369528228602f6d30aa3e8d63d6bf9dd24ecfae5fc48ce530bc19d74e35e80748740de9a6848d27c4482faadf0db029aa3f8ea435552857a8352742e93fe4f5d0ce042527") ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) [ 331.161730] bridge3: port 1(batadv_slave_0) entered blocking state [ 331.176910] bridge3: port 1(batadv_slave_0) entered disabled state [ 331.202005] device batadv_slave_0 entered promiscuous mode [ 331.231086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 17:54:50 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) 17:54:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 331.270545] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 331.301082] device batadv_slave_0 left promiscuous mode [ 331.313313] bridge3: port 1(batadv_slave_0) entered disabled state 17:54:51 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) [ 331.347218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=15512 comm=syz-executor.2 [ 331.379038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=15510 comm=syz-executor.5 [ 331.413650] IPVS: ftp: loaded support on port[0] = 21 [ 331.450904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=15510 comm=syz-executor.5 17:54:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f00000002c0)=""/238, &(0x7f0000000240)=0xee) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r4], 0x20}}, 0x0) 17:54:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 331.497209] audit: type=1804 audit(1599328491.088:143): pid=15518 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir969666034/syzkaller.hBoNpq/164/cgroup.controllers" dev="sda1" ino=16479 res=1 [ 331.732135] batman_adv: batadv0: Adding interface: veth17 [ 331.745778] batman_adv: batadv0: The MTU of interface veth17 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.852555] batman_adv: batadv0: Not using interface veth17 (retrying later): interface not active 17:54:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}, @tfcpad={0x8}]}, 0x144}}, 0x0) [ 331.983650] batman_adv: batadv0: Removing interface: veth17 17:54:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000200", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf251f0000000400cc0005009200c500000008009a000000000008009a000300000008009a0001000000050092000200000008009a0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4010) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x28000003, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x100000a, 0x2012, r2, 0x0) r3 = accept(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x48000) close(r1) 17:54:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x2e20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x1) listen(r2, 0x4000000043) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) recvfrom$netrom(r3, &(0x7f0000000040)=""/142, 0x8e, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x16a5d5c308000000) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 17:54:51 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x81]}, 0x5c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 17:54:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 17:54:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=']', 0x7ffff000}, {&(0x7f0000000180)='l', 0x1}], 0x2}], 0x600, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) [ 332.335840] IPVS: ftp: loaded support on port[0] = 21 17:54:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") write$binfmt_elf64(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000540)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x700}}], 0x1, 0x0, 0x0) 17:54:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) socket$inet6(0xa, 0x4, 0xdda7) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x17, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/86}, 0x20) 17:54:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @private}, {0x2, 0x4e22, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x101}) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {}, 0x0, {0x2, 0x0, @multicast2}, 'rose0\x00'}) 17:54:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)="78a03c2a59c2bfd9a139d6852b73e774578d55cb9edb9833b85a6bc2fe7d77819d676f0e7ff8cdbbe7517a4bb6d423a1e85cdbcdd1f7d029d7d1cf9cec4ff2905136079aca8aed53d4349bfa71f9560acd7c3bae1276d7a4267aa4d02269e5fde979df08837a06e7b21c12f6c52021876212adeac592c9016851b7e9", 0x7c) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 333.024294] IPVS: ftp: loaded support on port[0] = 21 17:54:52 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x81}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000d8ac000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000000) [ 333.524347] audit: type=1804 audit(1599328493.118:144): pid=15676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/176/cgroup.controllers" dev="sda1" ino=16490 res=1 [ 333.562817] nla_parse: 3 callbacks suppressed 17:54:53 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4}, {0x2b}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 17:54:53 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x6}, 0x20) 17:54:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x38, &(0x7f0000caaffb), &(0x7f0000000200)=0x23) 17:54:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:53 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @local}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) [ 333.562827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6f}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) [ 333.671253] IPVS: ftp: loaded support on port[0] = 21 17:54:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8001}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000000000000000000000800080003000000", 0x24) 17:54:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x6, 0x0, 0xc7e7, 0x3}, 0x8) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 333.825703] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:53 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r1) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300), 0xc) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000180)='syzkaller1\x00') ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) 17:54:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@newsa={0x144, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast1, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) [ 334.091591] IPVS: ftp: loaded support on port[0] = 21 17:54:53 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000016c0)={0x70, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan1\x00'}) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000580)="1ee7f5c114f301897833b4ee5be81e76b0076a46b2f7468ac5628e1a4502b57bb5f20e619b8a81fcb84e9ea4131068bf3aed3b7f0e007ddc92d0785cccca837fb113143bcacf5837ecb45ea8cec8471e0d89d488e6d3c581377665cd9521f2be87e400768b0b1de3b80e0aa35daadea65ee311e7250176bcf7c2a2acf8c1599c8dca183eb4d5337526f9d9e845777c4a9aaaad56d2312b5fe498fce90a66ffadc8d2308fa680da948fe4ea290f5c7fd8e9b3ea5e7903e5d594493ead330bb69afbfe0e6b6abb875ae494983d07f6ad0f205c78e766519378c4e107daea6c96e9a4670308823ca2dd0833422d9db3994f3e7d334239a907c30f07719b225ab969f2f94f771caebc2a93c7eb7e3b1bc89cf230e44b16c1089a3650854aeb790527e2ed4cf2423ae96d49341984278612080fa8e37f942157bf6c91c5624514d54a81b13f59c05b2fa88691e49febd3783222666f2fdef3c186d2351aa606799e81ea0fb2e5ec9fc177a5bf680a2d762ea95132d0f6a03c26ce673432fa6e2a3dc43382ecce2ac519f2c6b46be91be490c2f8fcb9a6e8406c539141dab66863cbff550b2c87cb28579e20aaa73cd3b31fe5727fa1ce0f3553eea94404c7c57eec102cdeba890c61a16a193dc547cc0bb4e47fa3ff2a4688595ea0b11ccb246738dfd6a1c3068d96bb66a5dc78beb2e393ceebca4f0732b105066a1c245ee81c73d596167c0fc3e951dcac688e3409540babf69ccec8bce750e45b3c4d6e62e0a5e29bc0125425dfddd6be09a325363b9bb828e6fe6872b56058f1132fef1c61c1f236c5a06b27537d71a850d604c5219eb4df9057354cef00e70309da12e213d9961917278423df7c3ab98624768f25ef4e88555564dc322a87d934d9ad0de3f1e39c5f946b802139de1d05d9460ad7e978b26f01facea7a2acc23f1137b39f6442d60d38847641775907f0e9a97fb082d8882993135a90a98e1585783d5dc572a7c973f52cd92d190cfdb4e76171a4244af33ec5e08b831e992cbbeabe0826a842ae97e1b3007afe805879996243a1b2d38984f79638b8f59fffa2c58325b1905ba01c59f6880d4694eb554634ba67f55d888174f612a9bfe525eb15c140bfee07a90507398443413579f37a54650fefc53f14a879a5b857a1b8c6e38e91cc2540202cef81a51492698c3440cca2b6b100706a07da142f168d7819ebf95e7e8b90ae2f0873e3081a94aeef87152dabafccc7fd633e452b7ab28a3ed00ff0944cd23cd547989fc6a073bbf3b8013420eb018c7fdf288cd8e1a570e2671e5adf216b29f1c9c256fd50293da7dffd0b2cd186a8463c177738c74a8f2297ef231d316ce83b0f80b31c084f4d7d8fa5b38b6fc3d99969966900fb80412faf568caf6858cddf0df0a6a475e54e97a406a399e9a03e683ecaf46dcd8fc1333001c60fa107deb60bc3be8f57164aa6de9837459703db42ea692cdcfbf0d9ef1c0bb2a678223b430a8158b413d823eb32e2cdf4a46daaa92f4dc2dea2e1e695bf9fbc9defc666031a350f611ffd7e31849571249b110b6f342133aa1bfd85b19228e9168c4716ed79cbc3660bc3f5074ef54d6a2a812c7cf8c45a34ed75d0fc5ee9f6d28d4a8cda52881d230238bc2d64074a8b4d74b93a3eba4d001f9287eae3d563f61221c62ceb067b0a4989f547e62c40f89401fb812715b256e4533218b9c110e4c2eb9ecfca5ff7f47280d0b3982614136cbac13da0ecb2dda3e183272b9d88a56f0b236d05eab7a2df18861b75b92d75271ac8cfdadb98485038255fcf58a507dbbfae77ecb40b6cc6d480abddafb148e82a3172c96654681e6c9bc2e33c5ea9ec6076d06fc49645e8f9a5c1508eb0d7f16b6001239604774e3f930da93b08753653058c5d30c8c05ffa5b7ff803406f71784a5e9953ee05011e9f43b4aa4701803b2d6565bd2e793f0652cbe64d90de7315c88be38c74824b31ae0ac98eb53b72d38633b57c079c6966694b50c3f9e597cd5e3554f84175c4baff9fbcf5d46fcc6da1a8bce3cfe069acc7c8b7868c14f6828bce0600359297c1a2e14045abcc89423004f40b1eccea9343b92ee66cbfb18ae8020d108b71a7fdbfa1c388bb61e5a88f09d540b353505ed53b295fbd74a6fb8b029692c2984750faee3ad0994fe1510c919130d9e8728ee0045dda84768e8305eb8e64edd2b656f7179b00cde3b5d06540f27c825cb76cea2b6897c8cd6dc6fae066d8c591c62a295417dc3d1830bf4b6df2c93a7a5c9cd638134dd4f11675bb4356519d954f212e8c81be12e276502e552157e3461b4bc57edcecf0de045b7e17ce92992a6918f56ed799f40900af58d30d3c41875a6e1ce1ec968359a91c7db681775ba97e50fc29ea0d61e8abfed0796b6459617243eb84342d1a6f80d7ddd5c9ef8eeaddee5e5af1a09c185b0c6f0499ca6641558cc9f0d68eb0d64db5be28c84f3f0b42bb8fa1a324b9fa0a3d643b8a2b338daa632a23a90d1408d69ee3cdc42340d3e6d849b8118c55d0956c287608129c0c223d97e11b7ac92d50ddd334a64486bd3ca4a799c56dbf47612d53d04b85585f52870a8f3eb013399d770e062ca559253e3a9415c8f13c37d99033ffcb1e7aa4aa4d459e0d45526533f88e25498a128bb382fca690b954b0b1c5eda8f861bd646ad0cc0b3c3307fa0ca7c2f8bc75bf02b3b70ea9bb3a96dc3f7b2ceddc64d882230fd946fd8770e67461b07c6912b38fc7ee7cc61cf50cbaacafa9dae74938baa4d9d0f42c2b7dd260f55d69cd59695a801286a02e7b2f9babad3c4392f869cdf130ba44a7817f102d249753910d4cb1720496927f8bca22aad4e974a5d0eca972ab06e0659c0a50c76873b833cca0f848a902e7197d7de17677479fb19304a97fada0003e9da14b52213b2f773ea433cec51ed827c746526f80e1c83fc51071507f5ed580322c70d14a2f61e0d6f7ff5c1229cd18f911f9e12c81e446e0f9aa841375bd748565e3336592ca918eb7c1f4a53b7f6fa79433b740891f552272841a938659801430e334b6b07b0ce53374ba61e7670c0916bdcb72e8b4743ed1766e9de27740830803a2395c93c5a1f69eac4c63f1233aa0a0a5bfcfa245a48c102c9e269013f1e6232f68f2ff2b85de88dcd36551b33e0df4238f4b7fc1b0a085a64590638d1e5a33f629c50bd52b23d3e6e69e92de9c8b7fbf86f8a48fd295a7208ee5832902e5733f278b6aec017a6af96fd5f0edc684b64f98e2de1d8d2d123b342d371434edfdb8544c118f3f7de298de0791a1dab5fd57c226d4f9dd80fabf97b5f466d79d94082ea9a9187ed1522de02101fa392c37ae3685ba8d1364a1638736d2da2d02e898c5fa450787b3df83cdcb874aca56fb4f5bdc9bdc2e9ad9fe8c8656fa38d4e4108a743064dce0ae29c12d4bc7405b91108787fb01644486fbc4f025171f43b434d978155ace6410b002b3ab687dbbe293d63927b13f46a0ecf2eb713776a0d49933e4182d583040922944b64968a197e81d10ea61e9e94858a8dea185ba39199ce58707f481b2533db5ef4c9d23fb99af2216a16fadae47e2c02d9b194e82ffe1700261b643625c959d54027835bc9223e90172b424bc1e43c963011c6b99e5acad01af3887e7ae25c2d55cb343cf98abf597df0af80d6f125223af1320ebe321ef16b7e1468ff2ff5629358030fa4769f1a34f79042843fe34c0869d048af49f21efb9862d0bad4b656e4f50580e785fdf64abd80c30338c23ce0924eb15a81d8b8a53d98161689e1c65ad1d418b4465f253b3f5744d312e8797ae7ef4b02ddc3fe967d2f964a1982492091f291825e1b6bdbff55379e92326c02831ce60ee4726a0cab569013b4627715b18ccaa581423533a3b9fdd4bd31883c5ca7a4bd64e98991dd0945da4a93f10eaab9b78048b849afc46c6f821f0202c30cfa5269ed30bb5db43664c5a9446b251d6baef27bfb013480643538efabb2d68f35f58ecfa15e82df792ac98f2a91b1740295fbc75f72cc360d80c8ef3b625627b0d77c5c271016d0a2dccf356b1e4014c9ea0aa6a1994a58a76edaf81e4da523765a43a6ff55c8f50f36e21b3d424ae4d22bada8c82ff0c46b44047e2799c82833d55c7cdacf0f4eb56eec81194b56fe4dae86d6b435f8430597c21005411cc85bbd594730f9b6b32c7c77b11508892e7aa2b5f6462f9767b379ac728cff76d362111b1eadbfcc546a932fcb6eead0af287cab04923c17df8504200c7cc7e6b94edb1bbe38953b7161b4e060d01644a05260b5c5ed5939a82141b59699a65280aee4facde049af4cbabd7a924a3cb95ad8a88ba750c33671b8907384c80b7e9c7778f895aa4c940a03783e6b83e7277d095f640090b004a16e1db0440d04ba0d27a43fba1fcff2044132b4a43e302c28577a626e8d813701bb874aeb4834dfe4fce9e811b6c7b4be9ecd2824dd6e65388f3f8c723706710b40c12b2eb16d64119e70867878e3137932e626509b7d54fc653d501bd658bfaedf8c5001a3444c98fcfbd0a5d81fb40cabf4c7b78298992fd7f033f85175e156f5a0bc6afd1d72697729fcb80531b80a487e4e62d961e47c5459a71904f87d5d276dcbf2084f8d1f60830e73bd4769bfe5ab9e11c2d7a9cad1f3217ad363d492c644d7c8da4afe23eb654e89c473d6693e6b6b47efba48451231330639cc38f474494facfe4ccfd630d79cfe116d7e9d01cc44d60bedbd0b571d0a4acadde04e07d8257ff3b033df11c6b45d9a228d0df7486854451bbf63c4a7fce803cf946e73d341b6a6f13d168ac1679329eb456d7671308f466d423b93ff65d322fb5828f3d7bcd3e7b3edab2e0dff2dd0c9d5fa360a5045b072e166a78a37d5eb3519110a0bc561b2e1a515d3d199872bed29628b9ec1bb1ff3591672f7a2724f12786b7b76fcd5f527cc0f8a2ba7234e2a6af08dd7cbe9ad47f2449524d2b4d80606134e4cec65fca19a2841b0c671d8143722bc03fed54d6f4dcacdf759c2b9a58a6f57a7cb9362efaff5783b4a62649a17010f4df5ecc1637978d6915b84a96beb89d2eaede837568daa663d4fe0c5f620a387a414be97defbe842ebec2f3a393d039131c8c1adf2a6fbd672db32dff65f4202e848f5864860963fd78c91b6c3daae5faceef20aa79c6e58cf75ed31a30c4f1bee658bf3604c05cf0678b866605d0dfdea06089ac4f9c9b48c85001fb7055b91323330bb0f20e70a921e9fedd56b4417f65e5d5a7a70091ad74457a5ed496a43bebff391df1a0c804640170852fed4f9d67a09ffffd855f06b195949f3d10728a3abca346a504b4f06adde29cf25bbc1b8f67d57115980b51b9d4b97eb8f38f964ad77e3519e0f55a1cc9cca97c306af1c15922999f83ab69e9d31d27db236641f6f4e3c0c0f77f5ac239bd845e10cb1cbb8e30a33cce092c34960b6516623f8215db75a2bd2d1f40d4654d93343481153a62d0e14fe6c7b516f997693f922af2f539ba947bd78ff07edae96b4991586dab11330747c4bfb7e6141158d3d1919bae4cebc42fcae9f9bd5afa97aa780986b9b63d8c3468ced5c048a15d4fd6eca42c011f647c050e6bec74fedf0050d33b6a236f0fede42adbeefa8b27ae3529c704aa36919de44a107cf48273a4bcd3d957556e4cef5a4cde7d97a025dc065563a65c067423b7c55563e3c54922cc4dee577837e22158e594e347e980fc95bb6120eb6f03878011afcf17880b10c8944cec66069887771e0ef28f879f3fa4ea570d7359572a07b325910dc545", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 17:54:53 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x18}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) 17:54:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 17:54:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="168c5a70a49a847cac7b2ae63b81ba6365c7d5f599e6585fc68b964618c75ab366bcfdb115a77df4491910640686a6bd5c8cff84fae21b1f49554229f474a808"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 334.452423] audit: type=1800 audit(1599328494.048:145): pid=15754 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16492 res=0 [ 334.537183] IPVS: ftp: loaded support on port[0] = 21 [ 334.543354] audit: type=1804 audit(1599328494.048:146): pid=15768 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/177/memory.events" dev="sda1" ino=16492 res=1 [ 334.657928] audit: type=1804 audit(1599328494.048:147): pid=15768 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir034052027/syzkaller.WHEWS5/177/memory.events" dev="sda1" ino=16492 res=1 17:54:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380100001a00010800000000000000007487f654b36e414647e04d6a85aceeb0e3daef21b274a924bab3619673863f5d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) 17:54:54 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005dc0)={&(0x7f0000005c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000005d00)=""/178, 0x2e, 0xb2, 0x1}, 0x20) 17:54:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2040004}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5f06ee7ee18f208a}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="00ed0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) 17:54:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x34, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 17:54:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {0x9, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xd}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) 17:54:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:55 executing program 2: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3c, 0x2, 0x7, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x1e}}}]}]}, 0x3c}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, 0x2, 0x7, 0x201}, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r1, 0x200, 0x0, 0x52}) bind$bt_rfcomm(r2, 0x0, 0x0) 17:54:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 17:54:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) close(r0) 17:54:55 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 17:54:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(r0) [ 335.726379] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 335.728027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.755050] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 17:54:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 17:54:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 335.818818] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 335.837628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.857647] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 17:54:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x44, 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(r3, &(0x7f00000005c0)='memory.swap.current\x00', 0x7a05, 0x1700) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'veth1\x00', 0x8001}) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt(0xffffffffffffffff, 0x1, 0x5ad, &(0x7f0000000240)=""/184, &(0x7f00000000c0)=0xb8) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 17:54:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="1bef6b0c4c954879fdd022b87c3d77718d6f3e0242df22a7b8d936e887", 0x1d}, {&(0x7f0000000140)="e39355f391347a63d83fd8fb70fe6dcab7c15425df5ccac4b29299f3f9a7ca8a774433b35640122c7fcf77cc3a6adc0017c79f1052549ecd46d0cbfbc93cf96f203fa6c7f1052f20449828a3417ea2528d685fd302ef98b8abf525edb769afd4df1303dc443c2345257d57d96a2e29ed13c295afc91f8914724a12fea38181749de1c27558cbe79dd85de99ded8e6c124c32945879e16c3a3355da78b57e8cf021a8e247d697b4b4ec0796e3e28736b4160f40d0c2387caec1f99fb9fb7d0e32adda379c1a079c053e59fea0fb39fbcf3a58c523b0308929ef9abd013f8f75baefac3b85acb5f233ca4d2aa2b9c25d221e829ad3f0ed4de5e94203c9d013c809f66c835672e9c595e2d5ed8fe73bd8f12eb9ebd156470bdc1f8a5b9e2d538a3932cdc0267fcea84879be62fe0f0de8dfe9e234fdbd754212", 0xfffffe0e}], 0x2}}], 0x1, 0x50) 17:54:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x11, 0x80002, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000000c0)={0xc}) 17:54:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x9}, [""]}, 0x14}}, 0x40804) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8805}, [@IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_PORT_SELF={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x40a1}, @IFLA_LINK={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x44}}, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 17:54:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) socket(0x0, 0x0, 0x67) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendfile(r2, r0, 0x0, 0x4000002) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 17:54:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 336.295533] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 336.346139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15934 comm=syz-executor.4 17:54:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct, @typedef]}}, 0x0, 0x26, 0xfe1d, 0x80}, 0x20) 17:54:56 executing program 3: unshare(0x40000000) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 17:54:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@func, @call={0x85, 0x10}, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) [ 336.658836] IPVS: ftp: loaded support on port[0] = 21 17:54:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x44, 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(r3, &(0x7f00000005c0)='memory.swap.current\x00', 0x7a05, 0x1700) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'veth1\x00', 0x8001}) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt(0xffffffffffffffff, 0x1, 0x5ad, &(0x7f0000000240)=""/184, &(0x7f00000000c0)=0xb8) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 17:54:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x50f, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0) 17:54:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 336.922279] device bridge0 entered promiscuous mode 17:54:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 337.004925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000034000511d25a80648c63940d0335fc60120012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1}, 0x0) [ 337.050197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.068303] IPVS: ftp: loaded support on port[0] = 21 17:54:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0]}]}, 0x78}}, 0x0) 17:54:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea7}, 0x102) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x1000001bd) 17:54:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 337.495784] device bridge7 entered promiscuous mode 17:54:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x11, 0x0, 0xcb) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x6, 0x7) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) 17:54:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:54:57 executing program 5: syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0x2}, {0x0, 0x9, "05748aa6172312"}, {0x0, 0x5, "06d3b8"}, {0x0, 0x2}]}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @dev]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 17:54:57 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) 17:54:57 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @null, @default, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose, @null]}, 0x48) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:54:57 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) 17:54:57 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e000100414eff0031000000ff01"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 17:54:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 17:54:57 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) 17:54:57 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a05b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 17:54:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) accept4$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001400)=0x1c, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket(0x10, 0x800, 0xfff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x103ffffff) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 17:54:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 338.317655] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 338.403351] audit: type=1804 audit(1599328497.998:148): pid=16101 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/193/cgroup.controllers" dev="sda1" ino=16529 res=1 17:54:58 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x6, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept(r1, 0x0, &(0x7f00000003c0)=0xfffffffffffffee6) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0xff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="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", 0x19b, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083a00000002, 0x0, 0x0) 17:54:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 338.520430] IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready [ 338.554064] 8021q: adding VLAN 0 to HW filter on device bond2 17:54:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 338.571793] audit: type=1804 audit(1599328498.048:149): pid=16126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/193/memory.events" dev="sda1" ino=16528 res=1 [ 338.603597] device veth14 entered promiscuous mode 17:54:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) [ 338.664820] bond2: Enslaving veth15 as an active interface with a down link [ 338.748704] audit: type=1804 audit(1599328498.058:150): pid=16126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/193/cgroup.controllers" dev="sda1" ino=16529 res=1 [ 338.789253] device bridge5 entered promiscuous mode [ 338.811536] device bridge5 left promiscuous mode [ 338.851875] bond2: making interface vlan2 the new active one [ 338.881263] device bridge5 entered promiscuous mode [ 338.897874] device vlan2 entered promiscuous mode [ 338.910503] bond2: Enslaving vlan2 as an active interface with an up link 17:54:58 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x10103, 0x0, 0x0) 17:54:58 executing program 4: pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x6c, 0x0, 0x20000890}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)=ANY=[@ANYBLOB='P\x00:w', @ANYRES16=r4, @ANYBLOB="00042dbd7000fcdbdf25030000000500050000000000040004000800030000020000080003000180ffff0800020007000000050006000800000008000200030000000800020000030000"], 0x50}, 0x1, 0x0, 0x0, 0x80408c5}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 17:54:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 338.969273] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 338.996456] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:54:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:58 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, "32c6e1885af1348cd1dfd7881d05fb0000000010", "954a877009c4f7295b8ea3d2fabe3c42729f3b42"}) [ 339.083901] IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready [ 339.120269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.125763] IPVS: ftp: loaded support on port[0] = 21 17:54:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001ac0)={'vxcan1\x00', &(0x7f0000001a40)=@ethtool_coalesce={0xe}}) 17:54:58 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0xef39, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 339.169460] device veth16 entered promiscuous mode 17:54:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0xfffffffa, 0x4) 17:54:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 17:54:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001e80)=[{{0x0, 0x5, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x3b, @local, 0x0, 0x4, 'wlc\x00', 0x10, 0x1}, {@broadcast, 0x4e24, 0x0, 0x0, 0x10000, 0x9}}, 0x44) syz_emit_ethernet(0x1e, 0x0, 0x0) 17:54:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:54:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff7fff}]}, 0x3c}}, 0x0) [ 339.418012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.553301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.574874] device bond3 entered promiscuous mode [ 339.595975] bond0: Enslaving bond3 as an active interface with an up link [ 339.821831] IPVS: ftp: loaded support on port[0] = 21 [ 339.979258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 17:55:00 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) bind$alg(r3, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) sendto$inet6(r2, 0x0, 0x0, 0x240408d1, &(0x7f0000000040)={0xa, 0x2}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4bfdc, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r8, 0x303}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffff, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x4f) 17:55:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:00 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20044811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 17:55:00 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300), 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000100)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 17:55:00 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x5}}]}}]}, 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:55:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0xd, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0) 17:55:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:00 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 17:55:00 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x28}}], 0x2, 0x401eb14) 17:55:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r1, 0x12b, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) 17:55:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x21b, 0x4) sendto$inet6(r0, &(0x7f0000000080)="03042a01140060024003002cfff57b066d2763bd56373780398d537500e50602591f081ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801610002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4021, 0x0, 0x23f) 17:55:01 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) 17:55:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r1, 0x181707408a8905ad, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) 17:55:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) socketpair(0x21, 0x80002, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x28, &(0x7f00000001c0)}, 0xb) write(r4, &(0x7f00000003c0)="2b82212b32d563a3a345cdeccf76b4455fefa2574ce5c89a29fdfd3dd944e4f52a43429c2d1b2ff73a4a421e6a121f18157025b6e43e96ca643ed79b74aa5031645729453a62700cecc35a9442392db464b2eafbc82f9f6bc7337cef1809258a7eda795069f59c218fadc0be17819ba99f5dd99bb53ce3afa6b7f4ae3c40934cc100677622b77f3206b7925d1e00eb62d06822b89502c2708977", 0x9a) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r5, 0x536ae464467e3929, 0x0, 0x0, {0x25, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x28, &(0x7f00000001c0)}, 0xb) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x10, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r8, 0x28, &(0x7f00000001c0)}, 0xb) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) write(r0, &(0x7f0000000140)="290000001400031c000000000f0000eb0100100006a40e07f36300007f25ffffff0100002a00f3ff09", 0x29) 17:55:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x1, 0x1d, 0x400, 0xc}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x2}, 0x38) 17:55:01 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000010, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 17:55:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:01 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_genetlink_get_family_id$devlink(0x0) [ 342.067285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=16385 comm=syz-executor.5 17:55:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f00000000c0)=[{0x3}, {0x6}]}, 0x10) 17:55:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x5}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ed2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x29}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x70}}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'lo\x00', r2}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(r6, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x4002be20000}) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x10, 0x8, 0x9, 0x13, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bc0, 0x2, {0x6, 0x33, 0xff, 0x7, 0x0, 0x0, 0x0, @in6=@empty, @in=@local}}, @sadb_lifetime={0x4, 0x4, 0x1, 0x81, 0xfff, 0x42}, @sadb_sa={0x2, 0x1, 0x4d5, 0x8, 0x40, 0xa9, 0x4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_ident={0x2, 0xb, 0xd7d, 0x0, 0xfff}]}, 0x98}}, 0x800) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001a80)={@ipv4={[], [], @remote}}, 0x14) socket$inet6(0xa, 0x80002, 0x0) 17:55:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 342.329743] IPVS: ftp: loaded support on port[0] = 21 17:55:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 342.850735] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.857577] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.898161] device bridge0 entered promiscuous mode [ 342.932359] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 343.120713] IPVS: ftp: loaded support on port[0] = 21 [ 343.195568] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 343.344242] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 343.356487] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.363332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.370169] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.376552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.423605] device bridge0 left promiscuous mode 17:55:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24, 0x80000000}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x70, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100004100) 17:55:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 343.454982] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.461578] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.525758] device bridge0 entered promiscuous mode 17:55:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x150}}, 0x0) sendto$inet(r0, &(0x7f0000000100)='\f', 0x300, 0x0, 0x0, 0x0) 17:55:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 343.882911] audit: type=1804 audit(1599328503.478:151): pid=16458 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/197/cgroup.controllers" dev="sda1" ino=16555 res=1 [ 344.020566] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.035859] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.042330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.049133] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.055488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.063157] device bridge0 left promiscuous mode 17:55:03 executing program 0: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 17:55:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) 17:55:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000b00ac14142603000e1208001e000000812fa800090008000300ed58f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) [ 344.205933] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 17:55:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x6) [ 344.258897] audit: type=1804 audit(1599328503.858:152): pid=16485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/206/memory.events" dev="sda1" ino=16547 res=1 [ 344.383558] audit: type=1800 audit(1599328503.888:153): pid=16485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16547 res=0 [ 344.504420] audit: type=1804 audit(1599328503.888:154): pid=16485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/206/memory.events" dev="sda1" ino=16547 res=1 [ 344.636369] audit: type=1800 audit(1599328504.148:155): pid=16490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16547 res=0 [ 344.698225] audit: type=1804 audit(1599328504.148:156): pid=16490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/206/memory.events" dev="sda1" ino=16547 res=1 17:55:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x1, 0x0, 0x0, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x400000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f00000002c0)=""/41, &(0x7f0000000340)=0x29) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x34, r8, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x4011) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}}, 0x0) 17:55:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x6c) 17:55:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) 17:55:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) 17:55:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000001}, 0x40) 17:55:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9", 0x1) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) 17:55:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x2c}}, 0x0) 17:55:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) 17:55:05 executing program 3: setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) close(0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000c88000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/69, 0x45}, {0x0}, {&(0x7f00000008c0)=""/75, 0x4b}], 0x4}}], 0x2, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x5) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) [ 345.533461] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 17:55:05 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878211}, 0x9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'macvlan1\x00'}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x553, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1}, 0x18) 17:55:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) [ 345.573787] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 345.649015] device gretap0 entered promiscuous mode [ 345.671223] device macvlan2 entered promiscuous mode [ 345.691090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 345.702346] IPVS: ftp: loaded support on port[0] = 21 17:55:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, 0x0, 0x6) [ 346.071339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.101494] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 346.134177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8000000}) 17:55:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, 0x0, 0x6) 17:55:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12101, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) 17:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 17:55:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436f7054f26b1b3f4279e7b3460040037536bedf6ba6b34e98125f30e6326996a3cfee33025a30b45bdcf1d273683626e00dc254d570dca6b78ad833488cfe4109eaf007ed7aeed7c255baa2b7e9edd0d69613d3cd62f00158e6eee8532151d0100000001000000dcbf00000000cc587424363dc6ad7f3bbf424c6e6cafbe9309aaa218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145903ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e3174ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e35056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b336a5bf74a105a6ccdd01b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083125531458b7d1e341c6f864f9829745f5865aad41d2915aabd602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad2eb372713255012e028cb2654d493a0b4b35faae176a6a1903f06dff9864ac936859a537e8e4871d4acf3e3dc10e13ef227f627a460d7ad1fa253d33fa74f172d340707ed3ceb855574e4e8d9308a7d29869ddaf0baf129cfae4e1e347c0cff28235a6bb7aa380420773cf62ce8b907a8f2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c13323816409ddbe4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68c98ef938e6515a94a71836469efe51d9b7eb85f3f9f7fef8ea0e2e335432f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cd28fc012f452b77f124e22f87621f39b50d938dbfd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a506963321d6401b110da9c786eeca22debc99735583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c1578efb821aa8a2d19ef52134842e64171f3963841086e3797a489e684e269e8ddbdad5cae785966825d081f2d987f05c534187738655d7dc958fd235d66a1619a68e41b94bc162f3556076b80550d961ca74f1ffdaccf0ea5fd7e0fca8b27ff3983ab74fd3d505366d1eab44e7fe312b3b129e000302d613916c9bcf9fa275fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fd024660402f7b3b79a433e080a1ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df222379a0955afb6008846557ee3bc09fda6dbb6550d5973665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76f8220df2a694f4cdcaa4f65c22f00000000000000000000000000000e2a8ad3a2f5007992fb4e5289acf179fdbcb5fb867758ea925d0918707034a32af5008029f882f79047b25e0c993a68d36566af505a9ed247d10aceaf50b9b3b33701131022d4b97"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12101, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) [ 346.343608] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 346.421176] IPVS: ftp: loaded support on port[0] = 21 17:55:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x20) write$binfmt_misc(r0, 0x0, 0x6) [ 346.464717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0xc, 0x19}, @CTA_MARK_MASK={0x8, 0x2, 0x1, 0x0, 0x1000000}]}, 0x20}}, 0x0) [ 346.640278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:06 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x10000000d) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000240), 0x28) [ 347.952188] NOHZ: local_softirq_pending 08 17:55:07 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @loopback, {[@generic={0x0, 0x2}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x4}}}}}}}}}}}, 0x5a) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 17:55:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000b80)=0x6, 0x4) 17:55:07 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}}], 0x400000000000240, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) 17:55:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c, 0xf}}]}, 0x4c}}, 0x0) 17:55:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x2000025e) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz0'}, 0x200001c4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) 17:55:07 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00f1ff0900010072737670000000002c000200080002"], 0x5c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 348.208106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:55:07 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0xe, 0x0, 0x0, 0x0, "5dd9c6e77d5e1b46"}}, 0x48}}, 0x0) [ 348.265879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.344779] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.374361] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 348.417558] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x84, 0x101, 0x1}, 0x2c) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000000cff9)={r1, 0x22c, 0x0}, 0x2) 17:55:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x1ff, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 17:55:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a3908a6886cceed10ab9b01b027", 0xdc}, {&(0x7f0000000c40)="5f9257f0f2bcff3ba8d986b579c537d9cf75cb611f5d6194c2bb8399098b4abe54414cfe9b7bd7cae1eca27c3ddb4aa90092f63db6903d2da0bdd36eae532df7a7d4a83c1048fa2b7ec11a4918e2ba1c9635baa2400a9b2ef611b977", 0x5c}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="742f0ebb71e05397085a022f6e4b253ed4a33d4f0df6438b23803a767f24b4ca128aeabddb3ea582453292807c8c5d840a09e65cc8394e219b03d5307c1a00cdcf8df3d6365f790ca25aead6a8b59b3b813a65ae16a0d94ef15aaa9b8297f54c9d0bef874f74dd9f27", 0x69}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:55:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x4000c88c, 0x0, 0x0) [ 349.317068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x458c4, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x0, 0x0, 0x0, @str='/)@&-*\x9e{+$&[\x00'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 17:55:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) 17:55:09 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc2002}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48001}, 0xc000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 17:55:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000980)="b0ff08c66b0d698cb89e0bf088ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 17:55:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x0) [ 349.606728] audit: type=1800 audit(1599328509.198:157): pid=16748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16608 res=0 17:55:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) [ 349.714169] audit: type=1804 audit(1599328509.238:158): pid=16753 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/205/memory.events" dev="sda1" ino=16608 res=1 [ 349.827767] audit: type=1804 audit(1599328509.238:159): pid=16748 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/205/memory.events" dev="sda1" ino=16608 res=1 [ 349.917537] device vlan2 left promiscuous mode 17:55:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r3, &(0x7f0000000200)="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", 0x200, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x10000ab00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 17:55:09 executing program 3: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) 17:55:09 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000000000000900010073797a30000000003c000000090affff00000000000000000000000008000540000000120900020024797a300000000008000a40000000000900010073797a30"], 0x84}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 17:55:09 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="22ba9417c0e96db7b53fb9465ab8f0de9467bf2958ab9ba019178edb93b067d9bda17964b467ea60e4f710f4aba8586b3d3f5abb829e2b7a93174e64ca", 0xfeef, 0x1, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x369) close(r1) 17:55:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r3, &(0x7f0000003240), 0x492492492492619, 0x0) socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvfrom$phonet(r4, 0x0, 0x0, 0x143, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xf0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 17:55:09 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001b00)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, 0x0, 0x221, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000080) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffffffff800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffff}) pwrite64(r4, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 17:55:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000033c0)=@framed, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000004c0)={0x2, 0xc4, "dcce7dcb42270bc6560ab863d3d627cf40da7e34f9978195578017189ac11cfeb64f18e29afb5ab2bb6872ebc391081fabef7e8ca715078bad7c5ad71ad3db23a47935be351e6e1b68bb02a39e81f2b31aa620773e22a5b3b38d7aed8525d53551e633bd05dad3b7b84c4253600f5563e71f9237366d2e6b3131dc4880f4acddec09391ff115c1daeb2cbe03df9b726b3380c204c6c9db6418fc597d0302e7107297a6d6dc5825bd8c0f708c24616ad4b75b7715efe7cfa103370cbfb3cdd602686bc41d"}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x130}}, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23151}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 17:55:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000b00)={'filter\x00', 0x10, 0x4, 0x3c8, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x8000000, 0x0, {[{{@uncond=[0x2, 0xb], 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 350.471409] audit: type=1804 audit(1599328510.068:160): pid=16777 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495001252/syzkaller.hxQYGC/211/cgroup.controllers" dev="sda1" ino=16611 res=1 17:55:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x64) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="501971d62bf100a76c7b3363e17b3380", 0x10) read$alg(r1, &(0x7f0000000140)=""/145, 0x91) sendmmsg$alg(r1, &(0x7f000000b940)=[{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000021c0)="fdf63c58d3a32915c24986c235ee4f2d1520bbd8b143886bc2733488c0c560f618c111626f83476ca9e0d5d5f78504799c406a3e78be9fc012848abacea84cc066711406ef5d5c941420b610f59c7c7683cd9ceccdb5eb28e2e40294f055cf3f27f1e19c53c29d790a2ff0227d17f4ca73e11d5e67e88ba9480e522a4fd544b177", 0x81}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x0) [ 350.629779] audit: type=1804 audit(1599328510.098:161): pid=16792 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/207/cgroup.controllers" dev="sda1" ino=16613 res=1 17:55:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @private, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0x0, '\x00\x00`'}}}}}, 0x2e) [ 350.833217] audit: type=1804 audit(1599328510.218:162): pid=16801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/207/memory.events" dev="sda1" ino=16609 res=1 17:55:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f00000004c0)={'filter\x00', 0x4, 0x4, 0x3c0, 0x1d0, 0x1d0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast1, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team0\x00', 'macvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x410) 17:55:10 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:55:10 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 351.034818] audit: type=1800 audit(1599328510.218:163): pid=16801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16609 res=0 [ 351.244886] audit: type=1804 audit(1599328510.838:164): pid=16801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/207/cgroup.controllers" dev="sda1" ino=16613 res=1 [ 351.351053] audit: type=1804 audit(1599328510.888:165): pid=16792 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir785416384/syzkaller.b780dh/207/memory.events" dev="sda1" ino=16609 res=1 17:55:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d00000003030000000000000027fb574721bc62a582b93b07bfa543589da1a0180551fed5a547762959882190f3a7cb83ad4c46698d310a66b32f15ef6d9d546c44c6b7c95fbcb7624304b3b67d32afffb7b7b08a96e2d7959c79e971456ecef5501e131ea30a18c9302e1fb4da28f7d10690c421a9002d38a7b27c68863a6106d50e1344f47d94df926c08a33813d7f52a14c3cecb453f3f3a4693f50a2d18ad0a494eb5b1be010818150a5fa54dfb9db027b46b2f1e9398c6d1f9f5ad8feadc83"], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 17:55:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 17:55:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000580)) [ 351.480315] audit: type=1800 audit(1599328510.888:166): pid=16792 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16609 res=0 17:55:11 executing program 4: r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x300) 17:55:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000013008105e00f80ecdbc0a4f210c804a01e000000302e4eeede63a30304001a000a000200aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) 17:55:11 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22}}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 351.607680] bridge_slave_1: Caught tx_queue_len zero misconfig 17:55:11 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) connect$x25(r0, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)) 17:55:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {0xa}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) [ 351.996879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.018607] device bridge1 entered promiscuous mode [ 352.036549] device bridge_slave_0 left promiscuous mode [ 352.042835] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.061439] bridge1: port 1(bridge_slave_0) entered blocking state [ 352.073627] bridge1: port 1(bridge_slave_0) entered disabled state [ 352.082285] device bridge_slave_0 entered promiscuous mode [ 352.089796] bridge1: port 1(bridge_slave_0) entered blocking state 17:55:11 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000016c0)=ANY=[], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 17:55:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000540)="1bef6b0c4c954879fdd022b87c3d77718d6f3e0242df22a7b8d936e887", 0x1d}, {&(0x7f0000000140)="9b83ef", 0x3}], 0x2}}], 0x2, 0x0) 17:55:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x800000000000, 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 352.096186] bridge1: port 1(bridge_slave_0) entered forwarding state [ 352.115806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:55:11 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 17:55:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none, 0x9}, 0xa) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x12) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000c00)={0xffffffffffffffff}) r4 = accept$unix(r3, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x3f00000000000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) 17:55:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x103ffffff) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') 17:55:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, [], [{}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}]}) 17:55:12 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000008240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1b, 0x0}}], 0x34, 0x0) 17:55:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = gettid() r2 = getuid() r3 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 17:55:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454de, &(0x7f0000000200)={0x0, 0x0}) 17:55:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0x210, 0x210, 0xd0, 0xd0, 0xd0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], '\x00', 'bond0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "a39042261524bd9233581d10a4fcdb4ad21bce049ff20e54e37bb8ea352f"}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 17:55:12 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) socket(0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x80) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000003, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="800000007abb6dc2d6ed78cf82225b9ee119b960af6f80207ffd3ec44eb89d3905bcfd3b000000000000"], &(0x7f00000001c0)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r4, 0xcf}, &(0x7f0000000080)=0x8) 17:55:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000)) 17:55:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x248, 0x318, 0x248, 0x0, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x48}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) socket(0x0, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) [ 352.988873] IPVS: ftp: loaded support on port[0] = 21 [ 353.041396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 353.108144] xt_TPROXY: Can be used only with -p tcp or -p udp 17:55:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0xea60}) 17:55:12 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x1, 0x7ab0715dca68fed7, 0x0, {0x0, 0x7530}, {0x0, 0xea60}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) 17:55:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xa00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfd9, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xffffffff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x8c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8, 0x18f, 0x7ff, 0x1, 0x100, 0xffffffffffffffff, 0x3, [], 0x0, r4, 0x4, 0x4, 0x2}, 0x40) r6 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x4, 0x0}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xc, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0x8, 0xa, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, r5}, @exit, @generic={0x4a, 0x6, 0x5, 0x4}, @exit, @jmp={0x5, 0x0, 0x2, 0x8, 0x9, 0x100}, @exit, @map={0x18, 0x4, 0x1, 0x0, r0}, @func, @ldst={0x0, 0x2, 0x3, 0x5, 0x0, 0x80, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xc4, &(0x7f0000000340)=""/196, 0xc3000, 0x2, [], r3, 0xe, r6, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x1, 0x40}, 0x10, r7}, 0x78) 17:55:12 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r0, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x0) 17:55:12 executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 17:55:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="8296"], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000015, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 17:55:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380), 0x4) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x4000f, 0x0, 0x10270000) [ 353.418487] device ip_vti0 entered promiscuous mode 17:55:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@can_delroute={0x1c, 0x19, 0x201, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}}, 0x0) [ 353.477849] device vlan3 entered promiscuous mode [ 353.483379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 353.519874] device ip_vti0 left promiscuous mode 17:55:13 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r3, 0x0, r1, 0x0, 0xd86dac9, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000540)) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) [ 353.926905] device ip_vti0 entered promiscuous mode [ 353.946824] device vlan3 entered promiscuous mode [ 353.972965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 353.995001] device ip_vti0 left promiscuous mode 17:55:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r3, 0x200, 0x70bd25, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000010) 17:55:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x6522, r0}, 0x38) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000200)=""/92}, 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:55:13 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 17:55:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x7c, 0x30, 0x727, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xd}, @TCA_CT_LABELS={0x14, 0x7, "c9b2483db858ef00"}, @TCA_CT_ZONE={0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "bf6614dd68622cce6d98faed56525a4b"}, @TCA_CT_MARK={0x8}]}, {0x4}}}]}]}, 0x7c}}, 0x0) 17:55:13 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000000380)={{{@in, @in6=@mcast2}}}, &(0x7f0000000140)=0xe8) [ 354.488741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 354.517976] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 354.546749] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 354.584528] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 354.614844] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 354.645882] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 354.668918] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 17:55:14 executing program 5: socketpair(0x15, 0x5, 0x1000000, &(0x7f000000dff8)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f00000000c0)=0x3c00, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x20) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r4 = accept(r3, &(0x7f0000000880)=@caif=@util, &(0x7f0000000900)=0x80) r5 = accept4$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f0000000340)=0x10, 0x800) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000080)=0xff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000380)=""/195, &(0x7f0000000000)=0xc3) connect$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) listen(r6, 0x2) accept4$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x10, 0x0) 17:55:14 executing program 3: unshare(0x6c060000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@ax25={{0x3, @null, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x80, 0x0}, 0x840) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x1e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 17:55:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c) 17:55:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x64}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:55:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000001c", @ANYRES32], 0x3c}, 0x0) [ 354.837862] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 354.874334] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 354.932452] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 354.976385] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 355.013289] IPVS: ftp: loaded support on port[0] = 21 17:55:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x10, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) [ 355.027581] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 355.082572] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 355.117724] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 17:55:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000280)=""/245, 0x32, 0xf5, 0x8}, 0x20) [ 355.295012] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 17:55:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS1(r0, 0x40047452, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS1(r1, 0x40047452, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS1(r2, 0x40047452, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, 0x0) 17:55:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000007ac0), 0xbf, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 355.885153] IPVS: ftp: loaded support on port[0] = 21 17:55:15 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x434800, 0x0) [ 356.078647] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_UPDELAY={0x8, 0x5, 0xd7}]}}}]}, 0x44}}, 0x0) 17:55:15 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000001740), &(0x7f0000001780)=0x4) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000260029080000000000000600040000"], 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/190, 0xbe}, {0x0}, {&(0x7f0000000400)=""/26, 0x1a}], 0x3, &(0x7f0000000480)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x0, &(0x7f00000001c0)={0x77359400}) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) [ 356.401787] IPVS: ftp: loaded support on port[0] = 21 [ 356.595951] (unnamed net_device) (uninitialized): down delay (215) is not a multiple of miimon (9), delay rounded to 207 ms [ 357.104718] IPVS: ftp: loaded support on port[0] = 21 [ 357.129163] kauditd_printk_skb: 10 callbacks suppressed [ 357.129176] audit: type=1800 audit(1599328516.728:177): pid=17181 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16646 res=0 17:55:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f00000010c0), &(0x7f0000001100)=0x4) 17:55:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:55:18 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="240000001e0007041dfffd946f61050007", 0x11}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfcfa) splice(r0, 0x0, r2, 0x0, 0xa360, 0x0) 17:55:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f00000003c0)) epoll_pwait(r1, &(0x7f0000dc7fc4)=[{}], 0x1, 0x0, 0x0, 0x0) 17:55:18 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0100"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 17:55:18 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) 17:55:18 executing program 4: unshare(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x40000000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 17:55:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0xffffffffffffff9b) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x12, 0xb, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f00000004c0), &(0x7f0000000280)=@tcp6=r0}, 0x20) 17:55:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 17:55:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000001200)={0x2c, 0x0, 0x0, 0xf}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x840) 17:55:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 358.849321] audit: type=1804 audit(1599328518.448:178): pid=17288 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir957219082/syzkaller.X3TL7Z/193/cgroup.controllers" dev="sda1" ino=16662 res=1 17:55:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x1b}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) 17:55:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) unshare(0x6c060000) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) mmap(&(0x7f0000af3000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0xa44fc000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') accept(r2, &(0x7f0000000040)=@x25={0x9, @remote}, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:55:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x10, "6f3b9242786b106c1fea0b1260d5dd8a"}}) [ 358.992028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.075156] audit: type=1804 audit(1599328518.668:179): pid=17311 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/220/cgroup.controllers" dev="sda1" ino=16648 res=1 17:55:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x0, 0xffff, @ipv4={[], [], @dev}}, 0x1c, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 17:55:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r1, 0x0) [ 359.118385] IPVS: ftp: loaded support on port[0] = 21 [ 359.125788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:18 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/219, 0x1a, 0xdb, 0x8}, 0x20) 17:55:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000001300)="197c39a6b2231728a1ea62eedf35cea35b6dbef8aa75fcb403eb942de8cc9e4b82d8cdb99f8f54467b384a61cb5065db7dab0a5e4fbe35dd00039669d91ae321c4b7072cb703a2ffd9ca23b633bef21e134a42ed618733b68f014a58f7dab500", &(0x7f0000000080)=""/4096}, 0xfeae) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x40, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x2c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x28, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=ANY=[@ANYBLOB="300000000914270029bd7000fedbdf010001000002000000080001000100000008000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001480)={0x0, 0xffdb}, &(0x7f00000014c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000200001700000014000680000002000400099f5bacdc00"], 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xbc, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001680)={0x64, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf33}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x44860) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}}, 0x20000040) [ 359.253494] audit: type=1804 audit(1599328518.808:180): pid=17333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/220/memory.events" dev="sda1" ino=16647 res=1 17:55:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) 17:55:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x80000001}, 0x10) bind(r1, 0x0, 0x0) close(r1) [ 359.394129] audit: type=1800 audit(1599328518.808:181): pid=17333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16647 res=0 17:55:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28, 'set\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) [ 359.434433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17363 comm=syz-executor.0 [ 359.502445] device geneve2 entered promiscuous mode [ 359.512299] audit: type=1804 audit(1599328518.858:182): pid=17311 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/220/cgroup.controllers" dev="sda1" ino=16648 res=1 [ 359.541961] Cannot find add_set index 0 as target [ 359.750576] audit: type=1804 audit(1599328519.348:183): pid=17322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/220/cgroup.controllers" dev="sda1" ino=16648 res=1 [ 359.786704] audit: type=1804 audit(1599328519.378:184): pid=17333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/220/memory.events" dev="sda1" ino=16647 res=1 [ 359.821632] audit: type=1800 audit(1599328519.378:185): pid=17333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16647 res=0 [ 359.859441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17363 comm=syz-executor.0 [ 359.896012] audit: type=1804 audit(1599328519.378:186): pid=17333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir873237597/syzkaller.pADQMO/220/cgroup.controllers" dev="sda1" ino=16648 res=1 [ 359.924447] device geneve2 entered promiscuous mode 17:55:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x11) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 17:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x40}}, 0x0) 17:55:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 17:55:19 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1004}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)) 17:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0xffffffffffffff44}}}}}]}, 0x40}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 17:55:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000000040)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81}, 0x20) 17:55:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x4, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:55:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/240, 0x1a, 0xf0, 0x10}, 0x20) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) r1 = socket(0xa, 0x1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x2e, @local, 0x67}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)="c18fd1e7da54564f5a1dd1f570e1608ac0c31c56a6df8e1e3f0492a9f0bccb2509bddd129ca41bb2bc8c1b7cb0ec3633a2671b2115fecd6aae8580501805a792db9af9600c2daae80ea1a770da99ab1fac7d57456955ba6f068417f316b4705aeb334f07cd2d655e047bc18c914ed3d9fc1650ca7d53292daaab70cd3688e267f2e90b46f7c4dae3a75f25ae383ed08d1268b56481b79973111cb9c105bcf08f7bf5727cd666b7549fbf1195160e8667c5", 0xb1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000ff0702000000080000000300000096cb00000800000007000000", @ANYRES32=r2, @ANYBLOB="180000000000000084000000000000007f0009000700feff1800000000000000840000000000000006000500c1ff080020000000000000008400000002000000f9ff00000500000009000000", @ANYRES32=r2, @ANYBLOB="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"], 0xb8, 0x84}], 0x1, 0x8854) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="773eaa990e0f4a0f1756265e86f540fb9631d254f65fc3f2317133915ff55fee6b835f750300a273d338", @ANYRES16=r4, @ANYBLOB="010000000000000000000e00000028000e00b94db81fefe0d02a3a26cf81f9fd5742b9585429bae11f070481c3d9746a13e8f8000000"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001080)={r5}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="0700020006000800aadc580d52fe99b340c1f3a66ef1c6929a365aaccdccdafd4cd9b38fa6cbd1d320fde717b5485969ef9af55aee64a9fcb263c69358db12f4334b4d7cbe"], &(0x7f0000000400)=0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000580)={r5, 0x1, 0x0, 0x401}, &(0x7f00000005c0)=0x18) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) 17:55:19 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = accept(r5, &(0x7f0000000640)=@ethernet={0x0, @dev}, &(0x7f00000000c0)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x80000000, @loopback, 0x7f}, @in6={0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x16}}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x23}, 0xbb}, @in6={0xa, 0x4e24, 0x1ff, @empty, 0x14b}, @in6={0xa, 0x4e20, 0x7, @private2, 0x80}], 0x9c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000006c0)=0x40, 0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) tee(r3, r4, 0x3f, 0x1d) pipe(&(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000301010800000000000000000700000708000840008000ff1000f43f00000001000003ff00007fff1400068008000100e00000010800143b08000c40000000000000007de32c67acedc70e4819295af804315f8d56406eb16b8d801f16c6"], 0x60}}, 0x40000) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020601040000e30062698a16cb9c0e7b613ebd4d4f67540b2354746d61703a706f72740005000400000000000980020005000100060000001c00078008000640000000a0"], 0x64}}, 0x0) [ 360.201919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.257113] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 360.287450] ipt_CLUSTERIP: Please specify destination IP 17:55:19 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000dfff0005000500020000000500010006"], 0x1}}, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17:55:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xfc, 0x4) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0xd17, 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x6}, 0x10) write(r5, 0x0, 0x0) bind(r5, &(0x7f0000000180)=@x25={0x9, @null=' \x00'}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf8, r3}, 0x14) 17:55:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x37e7, 0x24ba1dc0}) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffd37) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2bb98205) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) close(r1) 17:55:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x40) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000040), 0x10, 0x0}, 0x0) [ 360.390138] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 17:55:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x16, &(0x7f0000000f18)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x16, &(0x7f0000000f18)={{{@in=@multicast2, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x63) 17:55:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) 17:55:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 17:55:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000001c80)=[{0x0}], 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)={'syz1'}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=ANY=[], 0x1d0}}, 0x400c890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @multicast1}, 0x42, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='veth1_to_bond\x00', 0x5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x18003, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:55:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8f, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 17:55:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) [ 361.070740] device team0 entered promiscuous mode [ 361.093140] device team_slave_0 entered promiscuous mode [ 361.113997] device team_slave_1 entered promiscuous mode [ 361.155734] device team0 left promiscuous mode [ 361.160924] device team_slave_0 left promiscuous mode [ 361.187672] device team_slave_1 left promiscuous mode 17:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 17:55:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) bind$llc(r0, 0x0, 0x0) 17:55:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="fa"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10002, 0x0) [ 361.236960] device team0 entered promiscuous mode [ 361.243315] device team_slave_0 entered promiscuous mode [ 361.289800] device team_slave_1 entered promiscuous mode [ 361.316300] device team0 left promiscuous mode [ 361.348908] device team_slave_0 left promiscuous mode 17:55:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x80f806766c7df7b9) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r2, 0x3}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={0x0, 0x51c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x246d}, 0x90) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @dev}, @isdn, 0x1f, 0x0, 0x0, 0x0, 0x700}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x10001) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) [ 361.369441] device team_slave_1 left promiscuous mode 17:55:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002f54036205001a00000c9a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/228, 0xe4}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 17:55:21 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x133) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0xa, 0xf) 17:55:21 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@dev, 0x0, 0x6}, 0x20) 17:55:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}], {0x14}}, 0x9c}}, 0x0) 17:55:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140014"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 17:55:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1932529fe6e69fd1", @ANYRES16=r2, @ANYBLOB="0002ff010000fddbdf250500000008000800ac14140f14000500fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000c0a01080000000000000000020000060900010073797a30000000000900010073797a30000000000900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, &(0x7f0000000100)=""/140, 0x5a, 0x8c, 0x8}, 0x20) socket(0x25, 0x800, 0x5) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 17:55:21 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 17:55:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x6, 0x4, 0x9, 0x0, 0x1, 0x0, [0x2e]}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) [ 361.847814] RDS: rds_bind could not find a transport for ::6800:ffff:ac1e:4, load rds_tcp or rds_rdma? [ 361.886624] RDS: rds_bind could not find a transport for ::6800:ffff:ac1e:4, load rds_tcp or rds_rdma? 17:55:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}]}, 0x60}}, 0x0) [ 361.928045] netlink: 'syz-executor.0': attribute type 20 has an invalid length. 17:55:21 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:55:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x4}]}]}]}], {0x14}}, 0x7c}}, 0x0) 17:55:21 executing program 1: bpf$MAP_CREATE(0x7, &(0x7f00000014c0), 0x3c) 17:55:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x0, 0x0, 0x1a8, 0x6c, 0x298, 0x238, 0x238, 0x298, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @private2, [], [], 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) [ 362.174856] kasan: CONFIG_KASAN_INLINE enabled [ 362.179685] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 362.187070] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 362.193343] CPU: 1 PID: 17544 Comm: syz-executor.5 Not tainted 4.19.143-syzkaller #0 [ 362.201225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.210679] RIP: 0010:xfrmi_decode_session+0x146/0x770 [ 362.215964] Code: 7c dc 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f4 05 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5c dc 10 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 05 00 00 4c 8b 23 e8 28 a6 15 fb e8 13 6b 27 [ 362.234875] RSP: 0018:ffff888046a27188 EFLAGS: 00010246 [ 362.240241] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010517000 [ 362.247522] RDX: 0000000000000000 RSI: ffffffff86424630 RDI: ffff88809ecd6708 [ 362.254795] RBP: 0000000000000039 R08: 0000000000000000 R09: 0000000000000000 [ 362.262076] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88809ecd6700 [ 362.269355] R13: 0000000000000067 R14: ffff888049b69ec0 R15: 0000000000000000 [ 362.276632] FS: 00007f49cb7a1700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 362.284856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.290735] CR2: 0000001b30a27000 CR3: 0000000086ecd000 CR4: 00000000001406e0 [ 362.298015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.305284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.312578] Call Trace: [ 362.315269] __xfrm_policy_check+0x1eb/0x2300 [ 362.319780] ? __lock_acquire+0x6de/0x3ff0 [ 362.324051] ? __xfrm_route_forward+0x710/0x710 [ 362.328728] ? mark_held_locks+0xf0/0xf0 [ 362.332904] ? ip_vs_in+0x24d/0x25f0 [ 362.336659] ? ip_vs_out+0x6a5/0x1e10 [ 362.340602] ? ipt_do_table+0xd24/0x1820 [ 362.344752] ? nf_ct_deliver_cached_events+0x205/0x630 [ 362.350052] ? mark_held_locks+0xf0/0xf0 [ 362.354127] ? lock_downgrade+0x720/0x720 [ 362.358353] ? check_preemption_disabled+0x41/0x280 [ 362.363375] ? vti_input+0x21d/0x800 [ 362.367095] ? lock_downgrade+0x720/0x720 [ 362.371268] ? check_preemption_disabled+0x41/0x280 [ 362.376365] ? ip_tunnel_lookup+0x9e9/0xdf0 [ 362.380701] vti_input+0x57c/0x800 [ 362.384256] xfrm4_esp_rcv+0xc8/0x220 [ 362.388196] ip_local_deliver_finish+0x495/0xc00 [ 362.393150] ip_local_deliver+0x188/0x500 [ 362.397351] ? ip_call_ra_chain+0x5d0/0x5d0 [ 362.401731] ? inet_add_protocol.cold+0x27/0x27 [ 362.406428] ? ip_rcv_finish_core.constprop.0+0x875/0x1a60 [ 362.412118] ip_rcv_finish+0x1ca/0x2e0 [ 362.416051] ip_rcv+0xca/0x3c0 [ 362.419261] ? ip_local_deliver+0x500/0x500 [ 362.423639] ? lock_downgrade+0x720/0x720 [ 362.427814] ? ip_sublist_rcv+0xc40/0xc40 [ 362.432118] ? netif_receive_skb_internal+0x1da/0x3f0 [ 362.437359] ? ip_local_deliver+0x500/0x500 [ 362.441708] __netif_receive_skb_one_core+0x114/0x180 [ 362.446913] ? __netif_receive_skb_core+0x3270/0x3270 [ 362.452219] ? mark_held_locks+0xa6/0xf0 [ 362.456287] ? lock_acquire+0x170/0x3c0 [ 362.460307] ? netif_receive_skb_internal+0x6e/0x3f0 [ 362.465432] __netif_receive_skb+0x27/0x1c0 [ 362.469864] netif_receive_skb_internal+0xf0/0x3f0 17:55:22 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) unshare(0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r2, &(0x7f0000003ac0)=@dgm={0x25, 0x44c, 0xc3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x10, 0xffffffffffffffff, 0x11fcf000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e65766500001000028006000500810000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) connect$inet(r1, &(0x7f0000000900)={0xa, 0x0, @multicast1}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000900)={0xa, 0x0, @multicast1}, 0x10) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x494, 0x13, 0x4, 0x70bd27, 0x25dfdbff, {0x10, 0x0, 0xd5, 0x4, {0x4e21, 0x4e20, [0x8, 0x606, 0x10001, 0x2], [0x6381, 0x7fffffff, 0x1, 0x7], r6, [0x8, 0xeb1]}, 0x2, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xa, 0x1, "3951fb92e8c0"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "e6712255aeecfde124d01ebd6c79ba90d7bf0e28f96c425da4ee8f4a77f4347a7f51977a7965507cbf259767659d7eac83076af30969239905f942b75c9607215cafc3aeaa1fd16e3cd0203d2d964fbad65fbe3c12d7a1392f6b86d687c6d0199acacff4396487f6fbad92aa57a8df268c1b9cd2c20ed56ded4811d9bc921d93fb43eae4b37dc128891e6a49cfdd74f1b151b77f00882b3a689505d13179c97861d3d13a9fe3eabf891c8c9e6359c57030a6dd52ab764f894dad6a21e825683f49d9908f0f75f74e4430db99b6679541ecebcac0bc534db88c754116d8eae7dd4fa8e996"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "c4f840cc1cc8d86e086917d4a4e70299ad31f541b4e8ee0a92ace15d7ad1ef95feca31955053dba3f383292ee345a9ac2338c3958b842d820a06f97fea0a794392e9f762789648e7b3b2cd579694c314f40cd7810d28a7162c18a094fef4a7de7b0f9fdd7a3f749bd148a326be7b"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "c62fd0778a9becef33be4c490c62"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "fade441bf3fba44ab83f0bb029f7ce8101c03f5f55c5d3ad623532bb036daed2d771cb00c4a6b97e7f6a443858e83b4e32c381b8fb01f1a5edc573"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "788798ca008e18a8b6e7b6589fd12fd20ff81dde25fa565d4f92ad321d6a59a0e66cfea1e3a5f3270649b6dce630d4a9333d790986768b55fff330cd807622dd3ac70b5ca1fa2d6ade807a685248424afb811f5a21baf4a8f7769c201896d2b4cdb43f54cc2cec3be382e03ede0409"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "fda04dd835b5e03e22892d2a8e8900e7e03ef584bd46cb12acaf82f042a47107b92a1953c907fdfb30181c656a9c26e6b59dfe349950c260b097f07f35a108e34c52892ad4259e9eeedea084072f4cd8addb9483561b9df8e9bbb674449497b3203cb11ddd895cacff39750a2a63f95bbf1565becc3add5f1d728081909c6e0076d9bcad0194f32e47fa8a459a22f12a6c777b748c431f886c087ba8dd0f8fc5ae20c3005ec6dce4bb6e02951ecd8acb6d0c301ae1b0412d60553d54632d262a01"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "8d38e854aabc68b3721b7c5d8678bca92f54485d7d1db1cbe5bd86cbce3845ea99f92594f671d0a9a8cf2415911cdedc6af22761c442ac8e98fc0886f14a18222bcacec9adcdb2cc4b373eb726c31d922fe70b1fa347fc008556a4363551d90fa481b5189ac5e68b73a0675b0f957df0ec06c3c4fec3e46e167cb3682fc9e9a49d03a41b1aae18e6b2906f8b4dc060a9cc21f8e49903f23ac61b40c58be5cfb1e6df9d6d83cbdb28"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "eab204c22b52169e2858a1393a24049c467952fbeeba24a84f17a2cc343427bcc7c3c3a6d2957734cde13e7479da629805db43c367e6c0c3d10a340f6660cfb188beab66bc2f41f573935e79cf4262d6e51eef0037c6095528d4e0a98179802e3ca6e3db6bacd662b769a4170941d08c675fe1b7c3c1e515e7b259fe663db28490e5bcc8cc358c1350f5a4ff2d73a83e4ffc47c4930dcdc2e390338b230fd0"}]}, 0x494}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}}, 0x0) 17:55:22 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0x0, 0x98, 0x1d8, 0x0, 0x2b0, 0x198, 0x198, 0x2b0, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x27c, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f9) 17:55:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x0, 0x0, 0xffffffffa0008000}) [ 362.474823] ? __netif_receive_skb+0x1c0/0x1c0 [ 362.479569] ? eth_get_headlen+0x1b0/0x1b0 [ 362.483826] napi_gro_frags+0x67b/0x990 [ 362.487900] tun_get_user+0x2a53/0x4be0 [ 362.491979] ? __schedule+0x88f/0x2040 [ 362.495873] ? tun_chr_read_iter+0x1d0/0x1d0 [ 362.500323] ? lock_downgrade+0x720/0x720 [ 362.504591] ? check_preemption_disabled+0x41/0x280 [ 362.509628] ? check_preemption_disabled+0x41/0x280 [ 362.514689] tun_chr_write_iter+0xb0/0x150 [ 362.518943] __vfs_write+0x51b/0x770 [ 362.522674] ? kernel_read+0x110/0x110 [ 362.526615] __kernel_write+0x109/0x370 [ 362.530639] write_pipe_buf+0x153/0x1f0 [ 362.534658] ? default_file_splice_read+0xa00/0xa00 [ 362.539766] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 362.545148] ? anon_pipe_buf_release+0x2a0/0x380 [ 362.549970] __splice_from_pipe+0x389/0x800 [ 362.554399] ? default_file_splice_read+0xa00/0xa00 [ 362.559438] default_file_splice_write+0xd8/0x180 [ 362.562940] device geneve3 entered promiscuous mode [ 362.564334] ? generic_splice_sendpage+0x140/0x140 [ 362.564469] ? security_file_permission+0x1c0/0x220 [ 362.564488] ? generic_splice_sendpage+0x140/0x140 [ 362.584756] __se_sys_splice+0xfe7/0x16d0 [ 362.588929] ? __se_sys_tee+0xb90/0xb90 [ 362.592938] ? posix_timer_fn+0x3d0/0x3d0 [ 362.597105] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.601898] ? trace_hardirqs_off_caller+0x69/0x210 [ 362.602297] IPv6: ADDRCONF(NETDEV_CHANGE): geneve3: link becomes ready [ 362.606942] ? do_syscall_64+0x21/0x620 [ 362.606957] do_syscall_64+0xf9/0x620 [ 362.606977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.606988] RIP: 0033:0x45d5b9 [ 362.607008] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.648782] RSP: 002b:00007f49cb7a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 362.656503] RAX: ffffffffffffffda RBX: 0000000000033980 RCX: 000000000045d5b9 [ 362.663783] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 362.671056] RBP: 000000000118cf98 R08: 0000000000010005 R09: 0000000000000000 [ 362.678335] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 362.685610] R13: 00007ffd365a5b5f R14: 00007f49cb7a19c0 R15: 000000000118cf4c [ 362.692884] Modules linked in: [ 362.696192] ---[ end trace 8b9131cf2654355b ]--- [ 362.700998] RIP: 0010:xfrmi_decode_session+0x146/0x770 [ 362.706280] Code: 7c dc 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f4 05 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5c dc 10 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 05 00 00 4c 8b 23 e8 28 a6 15 fb e8 13 6b 27 [ 362.725255] RSP: 0018:ffff888046a27188 EFLAGS: 00010246 [ 362.730665] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010517000 [ 362.738035] RDX: 0000000000000000 RSI: ffffffff86424630 RDI: ffff88809ecd6708 [ 362.745328] RBP: 0000000000000039 R08: 0000000000000000 R09: 0000000000000000 [ 362.752668] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88809ecd6700 [ 362.760007] R13: 0000000000000067 R14: ffff888049b69ec0 R15: 0000000000000000 [ 362.767325] FS: 00007f49cb7a1700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 362.775554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.778874] xt_recent: hitcount (636) is larger than allowed maximum (255) [ 362.781496] CR2: 0000001b30a27000 CR3: 0000000086ecd000 CR4: 00000000001406e0 [ 362.793974] xt_recent: hitcount (636) is larger than allowed maximum (255) [ 362.795806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.795815] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.795823] Kernel panic - not syncing: Fatal exception in interrupt [ 362.797068] Kernel Offset: disabled [ 362.828705] Rebooting in 86400 seconds..