0000000000000000000080005400000001209000200365700000000000008000a40000000000900010073797a30"], 0x84}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfffffe36) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100003000) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000a17) [ 1312.488534][T22991] IPVS: ftp: loaded support on port[0] = 21 [ 1312.517784][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1312.556774][ T27] audit: type=1804 audit(1598995173.531:1180): pid=22997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1500/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 [ 1312.577428][T23001] device syz_tun left promiscuous mode [ 1312.606692][T23001] bridge19: port 1(syz_tun) entered disabled state 21:19:33 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000006) [ 1312.742884][T23001] bridge20: port 1(syz_tun) entered blocking state 21:19:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) [ 1312.793050][T23001] bridge20: port 1(syz_tun) entered disabled state [ 1312.841605][T23001] device syz_tun entered promiscuous mode [ 1312.876277][ T27] audit: type=1804 audit(1598995173.851:1181): pid=23012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1501/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 1312.924274][T22999] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:19:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000c00) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f000001a000)=""/102397, 0x120933, 0x800, 0x401}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x2400c045) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cda7e14b4ef5c29e610087f525fd846000000000000000007000000", @ANYRES16=0x0, @ANYBLOB="01000300000000a70052611b00fbff000000", @ANYRES32=0x0, @ANYRESHEX], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) [ 1313.071745][T22992] device bridge_slave_0 left promiscuous mode [ 1313.084630][T22992] bridge19: port 2(bridge_slave_0) entered disabled state [ 1313.138530][T22992] bridge20: port 2(bridge_slave_0) entered blocking state [ 1313.194018][T22992] bridge20: port 2(bridge_slave_0) entered disabled state [ 1313.249976][T22992] device bridge_slave_0 entered promiscuous mode [ 1313.302164][ T27] audit: type=1804 audit(1598995174.271:1182): pid=23013 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1501/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 21:19:34 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000007) 21:19:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x2000c880) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:19:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000c00) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f000001a000)=""/102397, 0x120933, 0x800, 0x401}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x2400c045) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cda7e14b4ef5c29e610087f525fd846000000000000000007000000", @ANYRES16=0x0, @ANYBLOB="01000300000000a70052611b00fbff000000", @ANYRES32=0x0, @ANYRESHEX], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) [ 1313.455902][T23005] bond19: (slave veth51): Enslaving as an active interface with a down link [ 1313.466618][ T27] audit: type=1804 audit(1598995174.271:1183): pid=23012 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1501/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 1313.565210][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1313.650345][T23009] device vlan1 entered promiscuous mode [ 1313.676977][T23009] device bridge32 entered promiscuous mode [ 1313.696924][T23009] bond19: (slave vlan1): making interface the new active one [ 1313.698629][T23070] IPVS: ftp: loaded support on port[0] = 21 [ 1313.752633][ T27] audit: type=1804 audit(1598995174.721:1184): pid=23086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1502/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1313.817414][T23009] bond19: (slave vlan1): Enslaving as an active interface with an up link [ 1313.875431][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): bond19: link becomes ready [ 1313.915949][T22991] lo speed is unknown, defaulting to 1000 [ 1313.916063][T22999] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1314.073234][T23063] bond19: (slave veth53): Enslaving as an active interface with a down link [ 1314.096599][ T27] audit: type=1804 audit(1598995175.071:1185): pid=23086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1502/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1314.124788][T22996] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 21:19:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000009010200000000000000000a080005400000001a080005400000001f0c0004800800014000000400"], 0x30}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 1314.172408][T23070] lo speed is unknown, defaulting to 1000 [ 1314.258047][ T27] audit: type=1804 audit(1598995175.071:1186): pid=23079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1502/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1314.353781][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1314.409308][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1315.557295][ T114] tipc: TX() has been purged, node left! [ 1315.575191][ T114] tipc: TX() has been purged, node left! 21:19:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000001b000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0014"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4c3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x20044c10) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x5, 0x0, 0x0, r8}}, 0x20}}, 0x0) 21:19:36 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000008) 21:19:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000c00) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f000001a000)=""/102397, 0x120933, 0x800, 0x401}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x2400c045) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cda7e14b4ef5c29e610087f525fd846000000000000000007000000", @ANYRES16=0x0, @ANYBLOB="01000300000000a70052611b00fbff000000", @ANYRES32=0x0, @ANYRESHEX], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 21:19:36 executing program 0: unshare(0x28000200) unshare(0x60030440) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x59, 0x6, @link_local}, 0x14) 21:19:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000f, 0x40010, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, 0x0}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_names='geneve0\x00'}) 21:19:36 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000100005070000f9bbc7e4b627ef400000", @ANYRES32=0x0, @ANYBLOB="251002fffff0001034001200090001ff766c616e000000002400020006000100040000000c00020000000000000800000c000200adb7ab0a37090000000a0000000a0005000f0000000000000008000a00"], 0x3}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x400c5) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x0, 0x0, 0x20000080}, 0x0) [ 1315.948838][T23159] IPVS: ftp: loaded support on port[0] = 21 [ 1315.996770][T23159] lo speed is unknown, defaulting to 1000 [ 1316.012865][T23165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1316.028134][ T27] audit: type=1804 audit(1598995177.001:1187): pid=23157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1503/cgroup.controllers" dev="sda1" ino=16374 res=1 errno=0 21:19:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="0000140000000000000045000fc0000000000029907800000000ffffffff24006558000000000000080000000000000086dd886488be000000001000000000210000000000002c0022eb000000002000000002000000000000000000000008006558000000004b694be8c1b98adb8d6e88205f33cd8c58231293e0cebdea3eb92130feb761b93cba1d917f0b6bff5cda111631215c3695417f3b1fc134d2eabce5952ec16be421353fc463cf517a42ba1d1dea78912c68559bf32e5921a8d6f849e146f3d814ff8ea1488a6c5a8dca4c0bb5a5805df15e9637560ba748bca5f0a23beb426e188924f144c4124e317061e6d08d4998a61bc3270019fc6bb78aff172d1b311bddced44d1409b3c282ba59171d1fa9ae2ec63aea543f4d399b4f6c235ed315e4326a247700b29a532e83690eb3911d73f8f03f4111b83ea19d6f93a48ec0d2401fa63b9b94bac962fd8c80001e3b8b703f74fb34873d03a3860b4f2780392ebb02a3620921a973cb5ca02d3003d8fd673ca25db503a78853ea976859858a6a4a5e9e144819661db3b0551e11340dc6b755b4cdf7b4df0b948109bb9a9d7b1ff585bb43ec74077085105752776f5d7a477743bb040e320765d33449d1df17dec0407e7fbc07a035b26ccd4f2f16aaeecff53c73dd4ac49f2f061f67889e04297daed05a6a2e2d4c58a0b99d1afc5d9c7add9b117d7786c8c4fc8909c67ad3605d1a9c6c4a97bb0162048146c373060f8538ddd074212cbfde1896512d46fa2724ac76fd1f5978c32f50c3b2c567e0dd88892c84856d3d964bcd05be0bf13a6f9c49eef61c31a54ceee5e6c8e2a4cb5ac294589f1efd387567c5906236a656f1a9836ba4da332e5137dd4398652dbcbbffe2afeffa3143726a8129a8c032b85150c13ac8f99f56cc4ed41f5ec56590e9d5c84510167f28d32db2a4e7450265a868d099b37d8ad6f6c381435769d2c573422cfb2e6ced643f0f8607df01805cfc9992e18fa4c6c8bce2f341bd6a3013e56a186491129dd65d1ff125ef7f2dcd0ca70cb059045d56309e8ce0307dbac0616013ef50968aef621f425c9f3348bdc9809c13dad6e047d74207b7a627b1f2658cc66f376078f0dca939fccb280a67df2485c67e19ff8e874da964a106d3c658198342ae542b01c07fd44066edb1a94ef611ad1dc94a808cc8bc2fec8f993ad315b80d15f6362d110479e5fdf5fed5e6379169a6b327b0faf8211ea880554f051f70bd55f8198067ed874a67f73943a0ed6a0626efaccb96a0edea375c514f2b4a41007bd9b1def76abe67c4ec8538d1087c04e0a4d0498bd1ba32a406818ed5e7dcccce3aba8d7a7ccfd06ad8a2008075e68f04501561309cafb337e2d97dc4383bef96924c4e1ba67a5b9b43f49a5e43092dacaa78bb890e751037238cf385625cd9a70ee468eab2a8477bcdf9dab5e71c57dcc49efa75727694d40e91c30440c45817e908e8adab775088863f8fb2a60b452c3f00ada34877882be2d3f837d460f8a4c9de9ebe8d6c11ed3f0bfd4306eadeaddd8277596139725b624a4e242c91232b954f12448951c6f56662f998edb22557adb237901585c0a871fc0d5b1e1462ddc7e0e68f138e724cee7b7d74b1966eddaf71ddafb8b13910ced717cc2a1aee8b942d431763a5acf62896c0ec7538371cac7ffecddd50864a68b7e0fb65611b22dedc46b051611d684b5d7338595380a601680cc558c0673698955d006225d689369388cbb2c558736a9a2bce867204e936e9199defc6d82001d3de70278919442cd34be83bb25c553a88345c56fc0f5631e5db2c6cf500b04e926c1de2e24bc3c929de0afb795596546b8d5c972153fcddb1c5cba0ed34bab89924facb0a9c58c9155ecd946e660758b0dfa04384b9fd011f0e3d4a6e9c8fa7ff6c5d57f63a7437cde4979bbdd8a6a32013cfc03f6cf90bdc27554b40f8eda758c8865e5dea86d09e8fe1c91251e9b2d9dc31e0e5937bdc56673339782f7920b4d397f7f345c308b1315d84f91827c178260dddd837b8d614ba0bd492913b8f6369d6a4824e2e53da910247c34e7c483d9d178ccf07cf4a8fd73fd170099dbe9a6292a816a979c082d0fa4ca2275e6fdc364b6a684bc536022929b99cfdb4c4bac6760f86eedd9b14e0835c578ac5a639a5e7ec2b6abe15755e1da36d5763d7c85e1c3822ca4911be5f58fb3c60d8524f13e20372e79bd92b5a7ab9afb13770d230c69787b7e6492ccd6c45fb8877af53f76803f9b746d1849f6c42a4a68a944c3542fc1d2cc7e2690ac1e592ea6a8882b5537aaed2ff133143560d3091e7376625549318575501f489d2cc9cc87e2d360b6e91a48a2a867d41d859523d33bcab10b192d8895d597a14f59f4a656f841df8da81d5a02245800a9296f7547b72109c529f0103cc07e859435d9a88f89e89fb5788cadafbe18b6ba688076cbf795699bc2cefaccfaf311eeace44bdf7193c0e132917f459ea9d3289ab86b2f63686a8606559f4e0f3791a8dce6693264b85a73bae47a39b5d99e2bed4e2a2f27c86350b49084e489a5c25af7ec0d6a2c14a00b770b9c9ccb21e84b8186272f96eb04f7507d9fb1e2e61f70c4012221cd29ba0b6399b70eecf62cabd321e1c894b8dc31ef21c3ee3191d6dda1f9ffae012c9a88c3e0c745dacbd9576b7e54338fdf49f9736c5719c28f13b3ed063c6e653c5c2bd75e7153507c6bf2abf015681185130d6792efc533fe54bd647c05996e49c4b53354cd58a7c68b75e633cd90d6ef17b4fd0bc49d8ef2918a6506f9ef79b86df5d920bfa0ea92f3ea48356883050660f5ab47250aa99706d35b8daf11f98558779a1bf6a882516655862febdddacedd406076edafd0a1cfab782c3ad746f5c9486389c11caf4ad85ee2060a22389b45c4cbefd75f675ee9c2981225fea301a9ec1da50d798d8729bf71f885e943c23dda9ce1a33894f8318d05a40c1e2d5a4fbb9de539f3120588ab0a93ec6e7d69911af3c27790b03b0e62615bce3c3c3f075b04a5cda5358783a10477603d1a970e6e1af0956861c0c1591b317be968710d7a2091d604bc7826bf5ed829b36b8838c5a442dcd5e61d4320426477805d410ba33d03075cdd8de528e7aed4aeee31ade48716213b8f487299df14da6628f2444f5fda3bb5d0a327f25d6e256d65ec1da7275e960fc0233020b404cd5b5665cd5a0ff3e9dd727db48c687f60eadcaa80719522b1cc403390b05a3c86d41fba4c856dba891207e14af91afd63e1f840caf33873b6919b34df1e289a95841ac850be41698f95782e1952531ede1d940c9d6cab0861f87caf65d6a3bdd7f78d14b3706c0c2741d27810cc3560d37f8697e056112d23392ab3be659173c64116d7ed5c0f7e0c2d7a5e56fba09b7ae604af8fcbeb898a575b07e28b8d11d18c41ca927579a78d609a4a0c52ef325112d46d686de7c053c8fadbe8fac07109e6ed25939c5f6b51b9dc12b92652343d1c493972fac4f0e138fea46b9712d75ce5db78ca61d54e5bfc0758afee0833486a3562ebb7bba6f3fe44e467150899dc8aa9c207e4f5a8a1f68c2c25dc10c97cded0796324ecffb92ddbc73b19087e18df24a16fc3d6528b6992dba986f417cd5dc3276f398122581814996bbff004dcddaa66369413f824a1248f1f2743912d9a9a8bbe0c057664293c7ef174eff220c7a2fc842788a1b0f459e2f4fc068f8ba2b65a5513f759bbf7e3a22398f870482a655fd053dfd249c2740302906b9ba5feec6c9ca94be6dd738c6420ef0dc68a2df7ae8bad60e90317de84c7548402fb255e7f953f572cd02258cbc711f6eb508e7d1429064311c375de8386f38eacef77507e40876ed70c11f4ea752a721060694b5084879092a626c07245700e7304777ce9e6d5526ab6bdbcd8a1bb1f842ca0db42dd1c5991bba0666ba3b5fd224d3812d287bc27d27e9803cf5c68309859ca1fdc2c9037e44c96bbc0e012c7dd2cf700c295e6e9f79e0aa20565789bde8df6400776cf03cce828bb3c9bc92e257242b9b80d6de2ba07e4d454afd33c10ec83f057d5cdffff43d6a6e10b69e440ecfd72336e294a3a6e0127ea935f288d63ab5d02dfb2ce806bb3e93e9b3e865c62406b204318d79673d50753113b3af12fb0c74d2ade02cb7c4591a5b673fdebe41e3a850b36a5d2e17fb7445b6b125c0a784a01f0014b8e6eb2aa79980c82da5ae7166d6a3a33665aee298ce9186754fe065f3dca40056b0476604bd615b5fd066518cb1c60112af9f12eb2fdd281e00f46320f6f508cefdb40f7c92b80fd7096f10e33a0c4ecbd5aa67c4f66643707092a6da66ed717899c5aaaccf5aeac6db492f392d6e191192d3b4b2757f2ea24b3087fcb346b3545e3a55351f37dbbd438c3593bcf3275f7bb2d0d1251a452faa01c04c19d030694a08400fa30c09ca8efcd0d638cb2bdb92d1fade20a03e80d1011aed207347bd59400dcd1719776f5eb26d2cc3c60e52698705d44ee9b43633a0ca6a1c45710fc479864267a64cc589bba3c7549305476f4a8c4931a96761eb3870acebc83d866c74b52bc3051faadfec0d2af15e75af7864264ce02807ccaf4b036f6b14a0c7d38def12c1d44b40d43da62ebd70636d2de80ea813ae3dc302afe13a4688d591432c885e61771e58d155dc5c74ec67d6d02241ccedb227c5dff04052749e3e6a0232939f332e511267e69a8ae3dddbe239b81351fe767cf1cd6fff3881a6774473fedbd90976675fe9c2fe256a086d5ebf3a08e050d0301d8750406364828c421a81198b0d85ec6a032b2ee8c8dc4e5853ca4536d626168e6730fa929f3b4a70a4fd8d08df4c1e104f420d434c8e12c19d03616425a0d65f4ec3b2e499b402dcd4f43bcf90e1cb0b5a5f3b4b40fb70118d11bfd03f9b675b8ec8c121243392fa84dab99cffd0ee7531c35ba68e806be4667ff35f60b68ef5e595bc3b261e467c6bb6f80f00c98ecdf1b6fe07a1f88d08042402212575845e3ce0b179dc9e9d1a3187036910538cfb05e55831edb1e604a93fa1cd15129cde0056f5fb5d88a44dc2fac9da4cb5e0cc73505617f517d5a319e5ca6131baa3a0f2ccd9772fe3348b299fbcd0b359d54c581ffbb0ff82b827e486ea0bb6329567544ce3f51a73d66a13cfb69b9960a7398c98347b70b34d62ed81460ff251f55dfda90595d63a54e71dfd771491c0edf1d897692700b94ddc4458af03880eee6940d63fc08a00e270fcf239809b005e1aec84566ed7c0147d8fa5c661e9d610760c1bac551b7164ba1ace2162dd4966f5585e9ef9ed500e24cc7eb8d93d3d50bf764cb07b1ad63dc424744c0a79d725eda752c280013470af04718a47f8b4ffc16ebb201a4d120751828a666ac7723b0e19e0a8050ce1e50d65bdd0351378b57834769244fa2b3853785e6b65d334bd7cca0e80e759d3381db2e847a9035482901876c0c22c96dea93008f78c367dfb78dd99fb97e7925062743748d07ef01dd7fc39594239d514fc546ce44b82d48b67bc30a957e18149a78d549ca44dc025862acdeba81aae1d509480217a3d43635d439733e973b11c8d9f314f768b0db2bb61d7d0ebce78fdc0db1f32b979ef6dd82c3ffca9c9f85fa2ab04d28950cc1de66a2de7bbf064022effa830d3e6d64014a13b03743169cab7855f04f789f4d7cd2553f03e3537c0b32259879826ca014cc92256595b057baf11adb7acb472ca48258b1b0b5600681c9f12f59b402d4e9866e7d7d11fa07f5193e0c046f7af6b3fce6aee69a7bca058929048171f4c4cf3e164d03900f43e86a3ee55cec7ec1e68c425a44419d9e15b2090ec200e1563d8775ca540de1e70b2b5ba29ab8309aaca0b1afefb06bc4811a6c0bbde5e"], 0xfca) [ 1316.139058][T23169] batman_adv: batadv0: Adding interface: veth41 [ 1316.153832][T23169] batman_adv: batadv0: The MTU of interface veth41 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:19:37 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000009) [ 1316.280264][T23169] batman_adv: batadv0: Not using interface veth41 (retrying later): interface not active [ 1316.313319][T23165] batman_adv: batadv0: Removing interface: veth41 21:19:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000c00) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f000001a000)=""/102397, 0x120933, 0x800, 0x401}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x2400c045) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cda7e14b4ef5c29e610087f525fd846000000000000000007000000", @ANYRES16=0x0, @ANYBLOB="01000300000000a70052611b00fbff000000", @ANYRES32=0x0, @ANYRESHEX], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) [ 1316.399362][ T27] audit: type=1804 audit(1598995177.371:1188): pid=23192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1504/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1316.458791][T23169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1316.487892][T23159] IPVS: ftp: loaded support on port[0] = 21 [ 1316.545502][T23165] batman_adv: batadv0: Adding interface: veth41 [ 1316.551790][T23165] batman_adv: batadv0: The MTU of interface veth41 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.592402][T23165] batman_adv: batadv0: Not using interface veth41 (retrying later): interface not active [ 1316.620947][T23218] batman_adv: batadv0: Removing interface: veth41 21:19:37 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000a) [ 1316.708493][ T27] audit: type=1804 audit(1598995177.681:1189): pid=23208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1504/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 21:19:38 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r1, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x81, 0x6, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x10, 0x2, 0x2ed3}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000480)={0x5bc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x0, 0x23, 0x20, 0x7}, {0x4, 0x24, 0x6, 0x8}, {0x5, 0x6, 0x2, 0x6c}, {0x0, 0xcc, 0x8, 0xffffffff}, {0x3, 0x0, 0x57}, {0x3, 0x8, 0x1, 0x5}, {0xfff, 0x1, 0x3f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xf}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0xc0}, 0x45) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x1f, 0x6, 0x28, 0x1f, 0xb2, 0x9, 0x3, 0xfe, 0x81, 0x7, 0x9, 0xfb, 0x80}, 0xe) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') r8 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x3, &(0x7f0000000080), 0x4) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000140), &(0x7f00000001c0)=0x4) [ 1316.926095][ T27] audit: type=1804 audit(1598995177.901:1190): pid=23232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1505/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1317.468908][ T27] audit: type=1804 audit(1598995178.441:1191): pid=23233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1505/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1317.642209][ T27] audit: type=1804 audit(1598995178.441:1192): pid=23232 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1505/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 21:19:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:40 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffff000}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="be", 0x1}], 0x1, 0x0, 0x0, 0x500}, 0x60) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc890) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) 21:19:40 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000b) 21:19:40 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9664c1bc", @ANYRES16=r0, @ANYBLOB="6ffe2dbd70000000000003000000580001800d0001007564703a73797a310000000044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0) 21:19:40 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 21:19:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x48]}, 0x48) r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000000c0)={'macvtap0\x00', 0x1abb, 0x4}) [ 1319.892132][T23263] IPVS: ftp: loaded support on port[0] = 21 [ 1319.958732][T23265] bridge0: port 1(vlan4) entered blocking state 21:19:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose, @null, @default, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose, @null]}, 0x48) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000500280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705004c882dec6fc57963000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r7], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x2d, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) [ 1320.005407][ T27] audit: type=1804 audit(1598995180.981:1193): pid=23269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1506/cgroup.controllers" dev="sda1" ino=16394 res=1 errno=0 [ 1320.037348][T23265] bridge0: port 1(vlan4) entered disabled state [ 1320.137085][T23263] lo speed is unknown, defaulting to 1000 [ 1320.218515][T23287] bridge0: port 1(vlan4) entered blocking state [ 1320.278099][T23287] bridge0: port 1(vlan4) entered disabled state 21:19:41 executing program 0: r0 = socket(0x7c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3f}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0xc2372d89c6ca8ff0, r3, 0x19}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x100000c00) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) r9 = socket(0x0, 0x0, 0x7) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) [ 1320.445639][T23310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:19:41 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000c) [ 1320.766040][T23263] IPVS: ftp: loaded support on port[0] = 21 [ 1320.777681][ T27] audit: type=1804 audit(1598995181.751:1194): pid=23333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/775/cgroup.controllers" dev="sda1" ino=16377 res=1 errno=0 [ 1320.915476][T23263] lo speed is unknown, defaulting to 1000 [ 1320.938281][ T27] audit: type=1804 audit(1598995181.882:1195): pid=23336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1507/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 1321.057426][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1321.167071][ T27] audit: type=1804 audit(1598995182.142:1196): pid=23336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1507/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 21:19:42 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000d) [ 1321.288332][ T114] tipc: TX() has been purged, node left! [ 1321.294724][ T114] tipc: TX() has been purged, node left! 21:19:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x6, [@empty, @multicast, @random="768831e81c92", @broadcast, @broadcast, @dev={[], 0x40}]}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008106e00f80ecdb4cb904021d65ef0b007c09e8fe55a10a0015000400142603000e1208000f0000000001a800160003000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) r2 = accept4(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000200)=0x80, 0x800) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000004c0)=0x401, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r5, 0xd29, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x106}}, {0x8}}]}, 0x70}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffff51}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xe9bc}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280), 0x0, 0x40000}], 0x1, 0x4004101) 21:19:42 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x8031, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@default, @bcast, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) [ 1321.477441][ T27] audit: type=1804 audit(1598995182.452:1197): pid=23364 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1508/cgroup.controllers" dev="sda1" ino=15870 res=1 errno=0 [ 1321.526103][T23367] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 1321.568563][T23369] IPVS: ftp: loaded support on port[0] = 21 [ 1321.577695][T23367] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1321.687091][T23369] lo speed is unknown, defaulting to 1000 [ 1321.692965][T23374] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 1321.711504][T23374] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1321.903963][ T27] audit: type=1804 audit(1598995182.872:1198): pid=23365 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1508/cgroup.controllers" dev="sda1" ino=15870 res=1 errno=0 [ 1322.018030][ T27] audit: type=1804 audit(1598995182.932:1199): pid=23364 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1508/cgroup.controllers" dev="sda1" ino=15870 res=1 errno=0 21:19:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:44 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT], 0xac}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) sendto$inet(r0, &(0x7f0000000400)="64db200aca03bea7b678b828a120e69fcc0521584e159c0a808d78073885fba22c1eb34eaf000bcef7d8a1e5b59d6522364241a0d7ef8408932f65014a16c6f0dc471b98bed82199eeae59d7d2bb3c62e4086c39027ec8c8abc03f8717b49f9cb407562ca4fda44e5360c27b3df8c2377e84090a143ee98fe8751d58d5ef6f3425cafd9e53e6ff698b49119d45e08defe5d3b680e129568a830797d1bc5f996a668efc11c3e38dd1de2378de9f247a14ebb74c441e51bd3222b4dd3d3f0cc0fc13db73e5e6a01b9fbe21d954098e2fa5f6133e88a10b182bb327ae0fd4268c84036faf044526df35e6f820a5470e150f37", 0xf1, 0x4000, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xfc01}, &(0x7f0000000180)=0x8) socketpair(0x4, 0x80000, 0x4, &(0x7f00000002c0)) 21:19:44 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000000f) 21:19:44 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004ba000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xc093b000) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='io.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffffffffffedc) sendfile(r3, r2, 0x0, 0x1) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="7eaca4b4449e2856234d8945c2afa4aa4e88e85fc7a47800abf843f52e961aca728a4af9515515305e9a96154cd095680866d5b94e5c71d763841328eb8c74a8f096f6f84848b1708c26fbe3c93d31aef466ff0f75c894d07b4c875576e72e287c889d9b70e50619dddc8c4ab3961666a84bf7d4a971fed323c950b472fcaceb74ef198c163094dfb6f2e4ffcd4d0d5d893a79036a91f75f9aa0c8baa1981e6e5735", @ANYRESOCT, @ANYRES64=r4, @ANYRES16], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x8) sendfile(r1, r2, &(0x7f0000000040), 0x1000000006) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="4524af4f36d639bf7f7c9eb1c0bd0e89c0de8c401fb6b47a76fd6b88ef542352af34ec8ac3800f31f65edd78054b", @ANYRESDEC, @ANYRES64, @ANYRES64], 0x4b) ioctl(0xffffffffffffffff, 0x8b02, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000100)={0xfffffffa, 0x0, 0x0, @local, 'sit0\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="075342778d7aa9dd02a420ad07383656298a4c55478c40e199554eef19a08f99a5d5f0b8a52a8e3c37492d38b111b05db3762706991a2aa9d5e15d33a8e97735cf37ff1157013a673b68922806ff82", 0x4f}], 0x1}}], 0x1, 0x4000001) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x7, 0x12) 21:19:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e2900002600055bd25a80648c63940d0624fc6010000a400a0002000200000037153e370a00118004000000d1bd2eb2de564ac88e8efe0af15730a8242aa9fff5f6a6bbfe61c95ebe2cb51a42c8cff994a4357ea48b2288af4f819e2d66a1e4ac2ab4149b4583e8348980ec2f5442f05f61690e22c8f7a64b1bf040950e24d4cf8a9ab790de863f7270b3326b55b7409dba6969847caa39c0fbf76d7867e06f4dbaa691ef41c901c75f1b43b15cdbac5d26efe1881f083d0f68450d95fe386ab5b7abaf577c6b6e9d08fe66b02f9902113d756a1ea5feda13130d204657bdb0dc888be603afebe8577ab1232f969ca9451665a272c7434bf9dcd3dcf10d0879a6379c8edc31d988024e875dd75fea60319a676ec7ea8783cd942664e9012a9c2fd94426250e7891cf93935ffdf7576e78b72ad5d6d219b89fc18a99119875a3df84f444ad5b43b77ae76c200d9b44667412fca1696d78cdab19a0cd4b50dc8d9d7d862b178d510f6e3d5e12b6d3b615c4cc27bc01e29ce7", 0x178}], 0x1}, 0x0) 21:19:44 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000050700429e2499e1d9abfa000000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) shutdown(r2, 0x6000a0ffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100003000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r7 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) [ 1323.895433][ T114] tipc: TX() has been purged, node left! [ 1323.908275][ T114] tipc: TX() has been purged, node left! 21:19:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES64], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x4, 0xfffffffd, 0x2, 0xf2, 0xb}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1324.098870][ T27] audit: type=1804 audit(1598995185.072:1200): pid=23415 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1509/cgroup.controllers" dev="sda1" ino=15970 res=1 errno=0 21:19:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:45 executing program 2: unshare(0x40000000) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0xe0, r2, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe7ac}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x3c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0xffffffff}, @TCA_CAKE_MPU={0x8}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_MEMORY={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x18}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="eea05cb7686b"}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x0, [], "954acb1f190814afbbc553cd12731189"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1324.311334][ T27] audit: type=1800 audit(1598995185.282:1201): pid=23434 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=15896 res=0 errno=0 21:19:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x271) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x8001) recvfrom(r1, &(0x7f0000000000)=""/20, 0x271, 0x0, 0x0, 0x0) [ 1324.435881][ T27] audit: type=1804 audit(1598995185.282:1202): pid=23419 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1340/cgroup.controllers" dev="sda1" ino=15896 res=1 errno=0 [ 1324.530169][T23445] IPVS: ftp: loaded support on port[0] = 21 21:19:45 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000010) [ 1324.666516][T23445] lo speed is unknown, defaulting to 1000 21:19:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x100}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x2}}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) 21:19:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e2e131ee5cb", 0xa0}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x72}, {&(0x7f0000000180)="a0b9c607a990b5d6194f441a04fbbe9e", 0x10}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d614", 0x25}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x67) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) [ 1324.967756][T23445] IPVS: ftp: loaded support on port[0] = 21 21:19:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffe0d35b1004bb0800450000380000000000019078ac1eaa0c009078030000004500000000000000000100007f0000017f00000100006371ae9b1c010000000000"], 0x0) [ 1325.097569][T23445] lo speed is unknown, defaulting to 1000 [ 1325.192616][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1325.192632][ T27] audit: type=1804 audit(1598995186.162:1205): pid=23497 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/778/cgroup.controllers" dev="sda1" ino=16002 res=1 errno=0 21:19:46 executing program 5: socket(0x2b, 0x1, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000000)=0x7fff, r1, &(0x7f0000000040)=0x1, 0x0, 0xf) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xff16) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000240)=""/254, 0xfe}, &(0x7f0000000100)}, 0x20) 21:19:46 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000011) [ 1325.408835][ T27] audit: type=1804 audit(1598995186.232:1206): pid=23484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1510/cgroup.controllers" dev="sda1" ino=15898 res=1 errno=0 21:19:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r5], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x2d, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}}}, 0x24}}, 0x0) 21:19:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES64], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x4, 0xfffffffd, 0x2, 0xf2, 0xb}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000100)=0x9, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 21:19:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1325.619306][ T27] audit: type=1804 audit(1598995186.242:1207): pid=23478 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1510/cgroup.controllers" dev="sda1" ino=15898 res=1 errno=0 21:19:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="53ed98431000850620d417aa3d9a008c20000200", @ANYRES32=r7, @ANYBLOB="08c1ffff000000001c0012000c000100626f6e64000000000c000200080001000492b16460f02c5d2196209a44ddbd9598ced7c46e555152c6310aa69b81699316bc33ad5eed235590dd6a76623f0bae1900abb7526516f2fdcad26975c1ccc5d4c3f501b9a3e294dc7c34"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtfilter={0x3050, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x301c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0x2fe0, 0x1, [@m_mirred={0x128, 0x16, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x0, 0x7, 0x6087, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x234a, 0xd44d, 0x8, 0x8, 0x400}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x10000000, 0x0, 0xffff}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0xfffffffffffffff1, 0xe6e6, 0x629}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81fc, 0xfffffffc, 0x2, 0x5, 0xcaa}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x6, 0x4, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x4, 0x7, 0x7}, 0x4}}]}, {0x19, 0x6, "1180062cfda8d0c2bed50f99675df1356ee42bb867"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x2c54, 0x1a, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x2c18, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xcbe, 0x1, 0x1000000f, 0x8001, 0x7}, 0xff, 0x4, [{0x80000001, 0x0, 0x0, 0x9, 0xcb24, 0x81}]}, [{0x400040, 0x540, 0xffff3e73, 0x3, 0xffffffff, 0x7}, {0x200, 0x200, 0x4, 0x200, 0xff, 0x7}, {0x9, 0x6, 0x3, 0x1, 0x4, 0x3}, {0x0, 0x5, 0x1, 0x1bb, 0x7f, 0x1}, {0x2, 0x4, 0xe8b, 0xfffffffd, 0x1ff, 0x9}, {0x7fffffff, 0x2d4, 0x80, 0x3, 0xdd34}, {0x8001, 0x1, 0x9, 0x4, 0x647e, 0x9}, {0x4, 0x101, 0x1, 0x2, 0x7, 0x7}, {0x3, 0xfff, 0x20, 0x5, 0x6, 0x2}, {0xfffffffe, 0x9, 0x8, 0x1e2aec81, 0x8001, 0x2}, {0x9, 0x2f, 0x4, 0x18be, 0x3f6, 0x6}, {0xe000, 0x20, 0xffff, 0x0, 0x80000000, 0x3f}, {0x2, 0x7f, 0x1ff, 0x9, 0x7fff, 0x2}, {0x0, 0x9, 0x1, 0x8, 0x68, 0x4}, {0x8, 0x7, 0x5, 0x0, 0x8}, {0xfffffffb, 0x9, 0x3, 0x7, 0x3ff, 0x5}, {0x6, 0x8146, 0x5, 0x7, 0x3ff, 0x5}, {0x7f, 0x7f, 0x5, 0x7, 0x7, 0x80000001}, {0x9, 0xffffff81, 0x8, 0x7, 0x6}, {0x28, 0xff, 0x800, 0x3, 0x1, 0x1}, {0x7, 0x874, 0x6, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x8fa0, 0x81, 0x7, 0x800}, {0xfffffe1b, 0x7, 0x9, 0x2, 0x1, 0x3ff}, {0x9, 0x4, 0x6, 0x2, 0x800, 0xa98}, {0x8, 0x7ff, 0xffffff14, 0xffffffff, 0x6, 0x40}, {0x7fffffff, 0x1ff, 0x59, 0x218, 0x401, 0xe6}, {0x10000, 0x2, 0x21b, 0x7, 0xfe5ce300, 0x7}, {0x8000, 0x0, 0x32e9, 0x1, 0x7, 0x8}, {0x9, 0x1ff, 0x5, 0x3, 0x3, 0x8}, {0x9, 0x200, 0x1, 0x200, 0x0, 0x1}, {0x3, 0x100, 0x1, 0x10000, 0x0, 0x3}, {0x0, 0x872d, 0x8, 0x0, 0x3}, {0x4, 0x1, 0x0, 0x1, 0x3, 0x3f}, {0xfffffff8, 0xe72, 0x7, 0x4, 0x1ff, 0xd64e}, {0x8, 0x93, 0x7198, 0x10001, 0x401, 0x2ec02aa}, {0x5224, 0x80, 0x2, 0x6, 0x8001, 0x6}, {0x3f, 0x3f, 0xfff, 0x0, 0x2, 0x881}, {0x29, 0xffffffff, 0x60, 0x0, 0x0, 0x3}, {0x1a0, 0x80, 0x9d, 0x1, 0x7, 0xa6bf}, {0x79, 0x8, 0xfffffe00, 0x7fff, 0x6, 0x2}, {0x80000001, 0x83, 0x7f, 0xfffffffe, 0x2096}, {0x9, 0x4, 0x9, 0x8, 0xec2, 0x5}, {0x2dc, 0x6, 0x7f, 0x80000000, 0x4, 0x3}, {0x0, 0x8, 0x6, 0x3293, 0x9, 0x9}, {0xa17, 0x5, 0x35, 0x5, 0x3, 0x101}, {0x80000000, 0x1c3, 0xfffffffe, 0x9, 0x0, 0x9}, {0x5, 0x9, 0x5, 0x6, 0xaf66, 0x59}, {0x7f, 0x3, 0x4, 0x5, 0x28fc3ed6, 0x80e0}, {0x3, 0x7, 0x0, 0x9, 0x8, 0x7}, {0x80000000, 0xffffffc0, 0xca, 0xfff, 0xfbe7, 0x9}, {0x10000, 0x4, 0x8e, 0x3, 0x1, 0x4}, {0x7, 0x1, 0x2, 0x1f, 0xfffffffa, 0x1}, {0x4, 0x10000, 0x0, 0x0, 0x0, 0x2db}, {0x80, 0x7, 0x9, 0x720, 0x7, 0x800}, {0x8, 0x80000001, 0x2, 0x100, 0xe8, 0x3ff}, {0x2000000, 0xffff7fff, 0x7cbe, 0x0, 0x2, 0x6}, {0x7, 0x6, 0x6, 0x2, 0x6, 0x8}, {0x3, 0x7, 0x61, 0x400, 0xff, 0x5}, {0x81, 0x200, 0x10000, 0x1, 0x7, 0x2}, {0x77, 0x2, 0x3, 0x2f, 0x7ff, 0x8}, {0x5, 0x40, 0x931a, 0x1, 0x3}, {0x1000, 0xc, 0x1, 0x6, 0x8, 0x400}, {0x3ff, 0xfffffffc, 0x7ff, 0x0, 0xffffffff, 0x40}, {0x7, 0x20, 0xfffffffb, 0x3ff, 0x8, 0x7ff}, {0x1000000, 0x1, 0x6, 0x400}, {0x200, 0x6, 0x8, 0x1, 0x8, 0x4}, {0x80, 0x9, 0x7, 0x5, 0x6915, 0x80000001}, {0x1, 0x0, 0x100, 0x81, 0x0, 0xe}, {0x10001, 0x5e2, 0x2, 0xec, 0x7, 0xd6}, {0x8, 0x4, 0x4, 0x5, 0x0, 0xae74328}, {0x8001, 0xffffffff, 0x80, 0x8, 0x1000}, {0xffffffff, 0x7, 0x800, 0x8, 0x5d5, 0x80000001}, {0x4, 0x7fff, 0x200, 0x1, 0x67a95d5c, 0xf4c}, {0xced4, 0x7fffffff, 0x3, 0x1, 0x5, 0xffff}, {0x1, 0x4e, 0xfffffeff, 0x7, 0x7ff, 0x3}, {0x7, 0x1, 0x10000, 0x0, 0xcac, 0xf080}, {0x6, 0x0, 0x10000, 0x1, 0x1}, {0x5, 0x16, 0xffff, 0x80, 0x5, 0xad1}, {0x401, 0x4, 0x4, 0x1, 0xa94f, 0x4}, {0xbf, 0xf119, 0x5bd, 0x1ff, 0x0, 0xc63e}, {0x7ff, 0x1, 0x1, 0xbf0, 0x2, 0x200}, {0x0, 0x3, 0x2, 0x7f, 0x7, 0xffff}, {0x0, 0x0, 0x1ff, 0x7, 0x8, 0x8000}, {0x1, 0x66, 0x1, 0x9, 0xa45, 0x8000000}, {0x6, 0x3, 0x16, 0x2, 0x0, 0x1f6000}, {0x0, 0xffffffff, 0x2, 0x8, 0x40100, 0x1}, {0xda, 0x10001, 0x8001, 0x3ff, 0x10001, 0x1}, {0x9, 0x20, 0x7, 0x4, 0x9, 0x80000000}, {0x5, 0x4, 0x6, 0x5, 0x7f, 0x506}, {0x4, 0x8, 0x4, 0x7f, 0x5}, {0xfffff870, 0x1, 0x2, 0x0, 0x7ff, 0xe8e5}, {0x8, 0x100, 0xffffffff, 0x6, 0x4, 0x101}, {0x3, 0x6c0, 0x8, 0xffff, 0x10000, 0x10001}, {0x0, 0x7, 0x5, 0x5, 0x200}, {0x100, 0xffff, 0x20, 0xfffffffa, 0x3, 0xed85}, {0xffffffff, 0x5, 0x200, 0xfffffff7, 0x5, 0x7fffffff}, {0x6, 0x80000000, 0x4, 0x3837, 0x7fff, 0xd0e}, {0x7f, 0x7, 0x4, 0x0, 0x800, 0x10001}, {0x7f, 0x1000, 0x3, 0x1000, 0x1, 0x8000}, {0xfe000000, 0x7, 0x5, 0x9, 0x7, 0x8}, {0x7fffffff, 0x1, 0x8da, 0x3, 0x7, 0x40}, {0xa67f, 0x9, 0x0, 0xddd1, 0xff, 0x9}, {0x6, 0x6, 0x400, 0x0, 0x401, 0x6}, {0x5, 0x0, 0x1, 0x81, 0x8, 0x10000}, {0x8, 0x0, 0x1, 0xfffffffe, 0x8, 0x1f}, {0x1, 0x6, 0xfff, 0x8000, 0x6f3, 0x6}, {0xfffffff9, 0x4, 0x151200, 0x7, 0x100, 0x20}, {0x0, 0x10001, 0x2, 0xfffffff9, 0x9, 0xc5d}, {0x7ff, 0x2, 0x5, 0x6, 0xfffffff9, 0x3}, {0x6131, 0x1, 0x721d047b, 0x7, 0x8, 0x20000000}, {0x60000, 0x8, 0x18ff, 0x7, 0x400, 0x4}, {0xf41, 0x7f, 0x7, 0x7, 0x4, 0x3}, {0x80, 0x5, 0x5, 0x9, 0x6, 0x8001}, {0xfc000000, 0x0, 0x800, 0x10001, 0x8000, 0x1}, {0x2, 0x3, 0x9, 0x0, 0x6, 0x9}, {0x5, 0x9, 0x7, 0x49097058, 0x7, 0x4}, {0x400, 0x8, 0x7ff, 0xfffffffe, 0x7f, 0x200}, {0x7, 0x1000, 0x3ff, 0x8, 0x72, 0xfffffffa}, {0x4, 0xffffffff, 0x8001, 0x400, 0xb758, 0x7f}, {0x8, 0x5, 0x2, 0x80000001, 0x2, 0xcd2}, {0x9, 0x7, 0x3ff, 0x101, 0x4195, 0x80000001}, {0x401, 0x7fffffff, 0x7, 0x8, 0x401, 0x9}, {0x5, 0x7, 0x4, 0x9, 0x7ff, 0x1}, {0x8, 0x8000, 0x570, 0x7, 0x4, 0x401}, {0x0, 0x1, 0x10000, 0x5d, 0xf05}, {0x3da, 0xffff, 0x81, 0x9, 0x1, 0x5}, {0x8, 0xff, 0x7fffffff, 0x3, 0xfffffc01, 0x9}, {0x7ff, 0x1ff, 0x3, 0x200, 0x8001, 0x7ff}], [{0x0, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x4ab0f6dfc5e7929a}, {0x4, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x3}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0xe6d6bb1af9e207fa, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x7439af383e01a527}, {0x5}, {0x3}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7f, 0x4, 0x1, 0x10001, 0x1}, 0xff, 0x6, [{0x8, 0x9, 0x3, 0x0, 0x1}, {0x6, 0x80000000, 0xcd, 0x20, 0xf7fd, 0x1}, {0x9, 0x7, 0xef, 0x1, 0x10001, 0x7}, {0x4, 0xfdc, 0x9dd, 0x5, 0x5, 0x2}]}, [{0x4, 0xdb, 0x3, 0x7, 0x400, 0x90000000}, {0x7fffffff, 0xffffffff, 0x1, 0x986, 0x4d, 0x20}, {0x3, 0x2, 0x3, 0x0, 0x8, 0xffff}, {0x2, 0x8a54, 0x8, 0x2, 0x7ff, 0x8}, {0x40, 0x6, 0x0, 0x6, 0x7, 0x1ff}, {0x4a25e268, 0x3, 0x1, 0x8, 0x1b, 0x101}, {0x9, 0x3ff, 0x80, 0xdf, 0x3, 0x1ff}, {0x948, 0x2, 0x0, 0x4, 0x0, 0xffffffff}, {0x81, 0x40, 0x1, 0xfff, 0x9, 0x4}, {0x2, 0x1, 0x95, 0x10001, 0x3, 0x81}, {0xffffffff, 0x3, 0x2, 0x7, 0x9, 0xffff}, {0x4, 0x1f, 0x32db, 0xffff, 0x3d, 0x8}, {0x3, 0xfe0, 0x80, 0x8000, 0x3, 0xa2000000}, {0x10001, 0xffff, 0x8, 0x1, 0x1000, 0x4}, {0x6, 0x0, 0x800, 0x67, 0x0, 0x1}, {0x8, 0xffffffff, 0x81, 0x1, 0x5, 0x477}, {0xdd, 0x9b, 0x6, 0x3, 0x15d, 0x101}, {0x4, 0x7, 0x6, 0x0, 0x100, 0xf6c}, {0xbc37, 0x7, 0x5, 0x2ee, 0x5, 0x3}, {0xfffffff7, 0x8102, 0x3c6, 0x5, 0x6, 0x472}, {0x3ff, 0xff, 0x3, 0x4, 0xf8000000, 0xe54}, {0x200, 0xffff1457, 0xe5, 0x1, 0x0, 0x7}, {0x0, 0x3, 0x7, 0x101, 0x4, 0x2}, {0x168ae353, 0x7ff, 0x5, 0x0, 0x2c4, 0x9}, {0x6, 0x65, 0x1ceed461, 0x9, 0x57, 0x5}, {0x7, 0x401, 0x401, 0x81, 0x3, 0x4}, {0x50ec6e99, 0xfffffc00, 0x8, 0x401, 0x8, 0x5}, {0x7f, 0x0, 0xfffff429, 0x2, 0xd37, 0x8}, {0x4264f851, 0x4, 0x2, 0xfff, 0x7, 0x1f}, {0xfffff2d1, 0x3, 0x101, 0x400, 0xc1, 0x4}, {0x80, 0x5f740000, 0x5, 0x1, 0x9d, 0x100}, {0xffff7fff, 0x5, 0x8, 0x7fffffff, 0xffffffff, 0x401}, {0x200, 0x4, 0x77, 0x800, 0x0, 0x2}, {0x3, 0x8, 0xdd, 0x1, 0x2, 0x8}, {0x4, 0x2, 0x1, 0x12, 0x80000000, 0x1}, {0x0, 0x7fff, 0x8000, 0x2, 0xffffffe1, 0x3}, {0x3f, 0x7f, 0x8, 0x8, 0xfffffffb, 0x7}, {0xda, 0x4, 0x8001, 0x3, 0x1, 0x72}, {0x30, 0x10000, 0x7ff, 0x9}, {0x7f, 0x7fff, 0x1f, 0x9, 0x980, 0x80000001}, {0x78be, 0x4, 0xd1ad, 0x3, 0x800, 0xffff8000}, {0xffff0000, 0x10000, 0x8, 0x10001, 0x5, 0x976f}, {0xf73, 0x6, 0x8, 0x81, 0xffffff81, 0x8}, {0x9, 0xffffff01, 0x800, 0x2, 0x3f, 0x9}, {0x7fff, 0x7a, 0x3f, 0x2, 0x3, 0xc2a3}, {0xffffff81, 0x6, 0x5, 0x1, 0x4, 0x7f}, {0x9728, 0xfffffffc, 0x1ff, 0x86, 0x1, 0xe4}, {0x1, 0x8000, 0x80000000, 0x1, 0x81, 0x80000001}, {0x1, 0x80000000, 0x5, 0xfffffffe, 0x3ff, 0x1}, {0x9, 0xfffffff9, 0x1, 0x9e2, 0x4, 0x6}, {0x0, 0x4, 0x1, 0x6, 0x2, 0x6}, {0x8, 0x3ff7, 0x8, 0x10000, 0x7, 0x79}, {0xfff, 0x4, 0x0, 0x1, 0x6, 0x3}, {0x9, 0x2, 0xa44, 0xc4c, 0x1, 0x2}, {0x6, 0x565f, 0x9, 0x0, 0x20, 0x1dd}, {0xfffffff7, 0x5, 0xa87e, 0x10000, 0x1fffc00, 0x5}, {0x1ff, 0x6, 0x8001, 0x3, 0x7, 0x1}, {0x6, 0x8, 0x3, 0xa4, 0x1, 0x8}, {0x100, 0x6, 0xfffffffe, 0x0, 0x4, 0x4}, {0x1, 0x7fffffff, 0xec89, 0x1, 0x9, 0x6d335a49}, {0xfffffe01, 0x8, 0x6ca, 0x3, 0x8, 0x495}, {0x7fffffff, 0x3ff, 0x6a8, 0x2, 0x5, 0xfffffff8}, {0x8, 0x3ef, 0x7, 0xfffffffb, 0x8000, 0x5}, {0x1ff, 0x4, 0x81, 0x1a5, 0x7, 0x3}, {0x8, 0xa97, 0x6, 0x0, 0x7, 0x100}, {0x0, 0x1, 0x100, 0x3ff, 0x20, 0x101}, {0x40, 0x9, 0x6, 0x9, 0x8ff, 0x1}, {0x4, 0x5f51, 0x200, 0x6, 0x7, 0xf6d}, {0x20, 0x855b, 0x5, 0x4, 0x40, 0x9}, {0x8, 0x1, 0xa94e, 0xfff, 0x2, 0x1}, {0x7, 0x9, 0x8000, 0x4, 0xfffff837, 0xe98}, {0x3ff, 0x6, 0x7, 0x8001, 0x3c33dda, 0x9}, {0x5, 0x3, 0x7, 0x6, 0x80000000, 0x8}, {0xffff, 0x0, 0x3f, 0xca, 0xffffffff, 0x401}, {0x4, 0x20, 0xa157, 0x0, 0x8f7, 0x3}, {0x2, 0x1, 0x2, 0x66, 0x2, 0x8}, {0x8, 0x6c, 0x9, 0x7ff9a48a, 0x1, 0x1}, {0x6, 0x5, 0x8001, 0x4, 0x3f, 0x4}, {0x0, 0xff, 0x7, 0x10000, 0x9, 0x4}, {0x0, 0x40, 0x4, 0x6, 0x2, 0x5}, {0x6, 0x597895d6, 0x3ff, 0x7fff, 0x0, 0x3af3}, {0x2, 0x5, 0x80000000, 0x26, 0x3, 0x6}, {0x401, 0x6, 0xaedf, 0x5, 0x5, 0xfff}, {0x200, 0x7ff, 0x8, 0xff, 0xfffffffc, 0x3}, {0x8000, 0x3, 0x3, 0x3, 0x9, 0x8001}, {0x8, 0x7, 0xffff, 0xaf, 0x6, 0x7f}, {0x8, 0x80, 0x603, 0x4, 0x7, 0x5}, {0x911, 0x1000, 0x5, 0xff, 0xffffff7f, 0x7}, {0x40, 0xa7, 0x100, 0x3, 0x101, 0x7}, {0x9, 0x10001, 0x9, 0x9, 0x7f, 0x3f}, {0x0, 0x9, 0xffffffff, 0x996, 0x0, 0x800}, {0x3, 0x9, 0x1, 0x7, 0x2, 0x9}, {0xf5, 0x4, 0x8, 0xfffffff7, 0x9, 0x6}, {0x20, 0x3, 0x81, 0x8, 0x101, 0xb51}, {0x6, 0x8, 0x800, 0x6, 0x3, 0x85d9}, {0xffffffe3, 0x1, 0x5, 0x3ff, 0x1ee9f797, 0x9}, {0x2, 0x0, 0xfff, 0x80000000, 0x7, 0x73ef}, {0x1, 0x9, 0x4, 0x1000, 0x4, 0x8}, {0x4, 0x9, 0xaa, 0xd0, 0xf5, 0x3}, {0x80, 0x7fffffff, 0x40, 0x0, 0x5, 0x7}, {0x0, 0x2026, 0x80, 0x9, 0x2, 0x2}, {0xfffffffe, 0x1, 0x7, 0x7, 0x8001, 0x3}, {0x8, 0x8, 0x78f, 0x61f9, 0x6, 0x7f}, {0x2, 0x1, 0x1, 0x0, 0x4cc, 0xffff}, {0xfff, 0x400, 0x96b2, 0x9, 0x3, 0x2}, {0x2, 0x9, 0x1, 0x73b, 0x80000001, 0x7}, {0x8, 0x2, 0x8000, 0x1000, 0xaf65, 0x4}, {0x0, 0x20, 0x0, 0x0, 0x6, 0x746}, {0x9fc, 0x95e, 0x4, 0x5, 0x100, 0x8}, {0xffff0000, 0x3, 0xb034, 0x81, 0x800, 0x95c3}, {0x40, 0x101, 0x5, 0x1, 0x7, 0xee}, {0x5, 0x72d6, 0x3ff, 0xfff, 0x7, 0x2}, {0x6, 0x7fff, 0x7fffffff, 0x3d, 0x400, 0x40}, {0x8, 0x5, 0xafd, 0xfffffffd, 0x4, 0x2}, {0x3, 0x1, 0x5dc6, 0x7fffffff, 0x7ff, 0x6}, {0x7, 0x5, 0x1, 0x101, 0x46, 0x1ee}, {0x1000, 0x80000000, 0x40, 0x1000, 0x4, 0x80000000}, {0x8000, 0x5, 0x0, 0x9, 0x2, 0x9}, {0x1c, 0x7, 0xfffff79e, 0x1, 0x5a}, {0x0, 0xa8e, 0x1, 0x5, 0x1, 0xfcdc}, {0x1, 0x8, 0xe84, 0x7fff, 0x100, 0xf9ef}, {0x3, 0x1, 0x4, 0x3ff, 0x3f, 0x8}, {0x3, 0x9, 0x4, 0xfffffff7, 0x256d04ee, 0xb5}, {0xfff, 0x8000, 0x8000, 0x20, 0x7ff, 0x3}, {0x4, 0xffff, 0x0, 0x7, 0x1}, {0x1, 0x4, 0xffffffff, 0x6, 0x7, 0x5}, {0x41, 0x8, 0xb4c0, 0x800, 0x1, 0x8}, {0x7, 0x800, 0x10000, 0x27ba9083, 0x8, 0x8001}], [{0x1, 0x1}, {0x1, 0x1}, {0x1e43b81dd017084b, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x3}, {0x1}, {0x2}, {0x5}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x91cab3a9b96ac975}, {0x4, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x3}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2}, {0x3, 0x1ce467e4b0121d17}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x3}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x4, 0x1, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x9, 0x2, [{0xd273, 0xa0, 0x80, 0x6, 0x7, 0x3ff}, {0x7, 0x28d, 0x79, 0x4, 0x7061, 0x7}, {0x401, 0x8000, 0x80000001, 0x9, 0xfffff03b, 0xfff}, {0x4, 0x8, 0x5, 0x2, 0x6, 0x7}, {0x1, 0x9, 0x6, 0x4, 0x3049, 0x200}]}, [{0x5, 0x2f2, 0x0, 0x3ff, 0x21f, 0x7a}, {0x0, 0x20d4, 0x7, 0x3, 0x81, 0x80}, {0x2, 0x3ff, 0x3, 0x0, 0x8, 0x101}, {0x3, 0x8e4, 0x5, 0xffffffff, 0x7f, 0x8}, {0x6, 0x44519c47, 0x101, 0x4, 0x8, 0x5}, {0x3, 0xffffffff, 0x1764, 0x68, 0x10000, 0x800}, {0x4, 0x1, 0x6, 0xfffffffc, 0x0, 0x3}, {0x2, 0x7, 0x5, 0x8, 0x8, 0x78f12b3}, {0x1, 0x3, 0xd5db, 0x80000000, 0x6, 0x3b}, {0x9, 0x1, 0x20, 0xff, 0x9, 0x6}, {0x6, 0xe3, 0x6, 0xfffffeff, 0x2}, {0x7f, 0x4, 0xca, 0x5, 0x0, 0xe8}, {0x6, 0x5, 0x6, 0xfff80000, 0x81, 0xfffffffc}, {0x1, 0x8, 0x6, 0x3, 0xfffffffe, 0x9}, {0x1, 0x2, 0x0, 0x3e, 0x8, 0x4}, {0x4, 0x1000, 0x1ff, 0x7f, 0xa5, 0xdd36}, {0x0, 0x9, 0x7fffffff, 0x7, 0xfffffffe}, {0x0, 0x2, 0x6a24, 0x0, 0xffff, 0x8001}, {0x3ff, 0x5, 0x4, 0x7fffffff, 0x7fffffff, 0x6}, {0x7, 0x100, 0x401, 0xff, 0x3f, 0x3}, {0x800, 0x3, 0x2000, 0x3f, 0x80000001}, {0x1602b8bd, 0x5, 0x200, 0x1, 0x8, 0x9}, {0xf34, 0x2, 0x9, 0x1f, 0x1, 0x81}, {0x0, 0x2c, 0x2, 0x1, 0x800, 0x2}, {0xec7, 0x4, 0x6, 0x7, 0x0, 0x7f}, {0x1, 0x9, 0x8, 0x2, 0x1, 0x6}, {0x8, 0x34ed, 0x0, 0x1f, 0x5}, {0x8, 0x8001, 0x1, 0x26, 0x3, 0x7}, {0x3, 0xfffffff9, 0x40, 0x7, 0x0, 0x4}, {0x3, 0x8, 0x2, 0x6, 0x344edce5}, {0x20, 0x0, 0x1, 0x5, 0x4, 0x243c}, {0x7fffffff, 0x0, 0x800, 0x100, 0x7, 0xfffffffe}, {0x2c, 0xd3, 0x5, 0x1f, 0x6f, 0x7}, {0x1, 0x6, 0x9, 0x7, 0x2, 0x1}, {0x7fffffff, 0x0, 0xec65, 0x9, 0x4, 0x1}, {0x6, 0x40, 0x80, 0x9, 0x8001, 0x7f}, {0x2, 0x7, 0x81, 0x7, 0x6, 0xffffffff}, {0x80, 0x200, 0x2a7, 0x8001, 0x9, 0x1}, {0x1, 0x10001, 0xffffffff, 0x1, 0x2, 0x84}, {0xc687, 0xe35c, 0x4955099b, 0x1, 0x1, 0x1}, {0x7, 0x6, 0x9, 0x4, 0x5}, {0x0, 0x1f, 0x0, 0x7624, 0x1, 0x9}, {0x0, 0x6, 0x6, 0x6, 0xde1a, 0x9}, {0x7, 0xffff, 0x2, 0x7ff, 0x7, 0x80}, {0x3, 0x400, 0x5, 0x1, 0x2, 0x9}, {0x9, 0x8, 0x0, 0x1d, 0x80}, {0x101, 0xae2, 0x99, 0x9, 0x7bc, 0x3}, {0x1, 0x91, 0x74, 0x9, 0x8, 0x6}, {0x1, 0xc3, 0x5, 0x40e9, 0x9, 0x3}, {0x6, 0x1, 0x40, 0x1, 0xa413, 0x2125d800}, {0xffff8000, 0x7, 0x8, 0x8, 0x0, 0x1ff}, {0x0, 0xffffff00, 0x0, 0x1000, 0x2, 0x8}, {0x9, 0x3, 0x3ff, 0xe7e, 0x5, 0xff}, {0x5, 0x8, 0x1, 0xea50, 0x2, 0x4}, {0x3, 0x40ab, 0xced, 0x0, 0x8, 0x7}, {0x4, 0xfffffff9, 0xffff, 0xbfa, 0x3, 0xfffffd45}, {0x5, 0x1, 0x1, 0x4, 0x0, 0x9}, {0x3, 0x8, 0x0, 0x4, 0x20, 0x2}, {0xba4, 0x80, 0x4, 0x0, 0x3, 0x401}, {0x8, 0x1, 0x101, 0x180, 0x81, 0x1000000}, {0x80, 0x20, 0x5f4659c6, 0xffffffff, 0x6, 0x800}, {0x8001, 0x2, 0x6, 0x8001, 0x0, 0x7}, {0x6, 0x0, 0x101, 0x4, 0x800000, 0x8}, {0xda68, 0x3, 0x8, 0x8001, 0x4, 0x3f}, {0x5, 0x9, 0x2, 0x4, 0xb26, 0x7}, {0xfff, 0x0, 0x4, 0x7, 0x6, 0x80000000}, {0x400, 0x6, 0x9, 0x4, 0x5, 0xbf21}, {0x1000, 0x5, 0x8, 0x2, 0x1f, 0x5}, {0x80000000, 0x8, 0x80000001, 0xfffffeff, 0x100, 0x9}, {0x1, 0x5, 0xffffffff, 0x4, 0x8000, 0x9d1}, {0x3ff, 0x0, 0x8001, 0xfffffffd, 0x1, 0x80}, {0x9, 0x3, 0x94d, 0xfffffffd, 0x9, 0x100}, {0x3, 0x4, 0x401, 0x40, 0x3ff, 0x10000}, {0x8cd5, 0xdaf, 0xa5, 0x72f49546, 0x80000001}, {0x2, 0x1000, 0x9, 0x9, 0x0, 0x4}, {0x2, 0xffff, 0x1, 0xffffffff, 0x8, 0x17fb}, {0x40, 0xfffffeff, 0x7, 0xfffffffb, 0xe32, 0x4}, {0x0, 0x1, 0x0, 0x5, 0x1, 0x68}, {0x7, 0x94, 0x6, 0x7, 0x6, 0x1f}, {0x9, 0x3, 0x3f, 0x3a9999a4, 0x9}, {0x0, 0x2, 0xffffffff, 0x9, 0xc, 0x80000001}, {0x690b, 0x2, 0x8, 0x5af7, 0xccb, 0x100}, {0x0, 0x1, 0x3, 0x8, 0xa763, 0x69f2}, {0x3, 0x1, 0xfffffff8, 0x100, 0x5, 0x1428}, {0x200, 0x0, 0x3, 0x3, 0x7ff, 0x22f2}, {0x8, 0x3f, 0xbe31, 0xf10b, 0x2, 0x1}, {0xe, 0x3, 0x3, 0x1, 0x4, 0x3}, {0x0, 0xfc, 0x1, 0x100, 0x2, 0x7fff}, {0x5, 0x2, 0x800, 0x4, 0x2, 0x9}, {0x7, 0xe74, 0x7, 0x3f, 0x0, 0x524c}, {0x8000, 0x3, 0x3, 0x7, 0x4, 0x2850}, {0x6, 0x1f, 0x4, 0x8, 0x7fff}, {0xc02, 0x8000, 0x5, 0x0, 0x101, 0x3ff}, {0xffffff7e, 0x37f22cab, 0x7, 0x8, 0x7, 0x101}, {0xff, 0x40, 0xfffffe00, 0x10000, 0x8, 0x2}, {0xed3, 0x800, 0x27eb, 0x7fffffff, 0x0, 0x7f800000}, {0x0, 0x400, 0x9, 0x7fff, 0x7f, 0x180}, {0x0, 0x1, 0x2, 0x8, 0x3f800000, 0x640000}, {0x3, 0xff, 0x9, 0x6, 0xde9, 0x6}, {0x0, 0x4, 0x6, 0x7f, 0xe6e0, 0x3ff}, {0x0, 0x80000000, 0x7, 0x7, 0x1000, 0x1}, {0x0, 0x7fff, 0x8, 0x7ff, 0x1, 0x1}, {0x7, 0x7, 0x200, 0x5, 0x0, 0x7}, {0x1, 0x2, 0xfffffe01, 0x1ff, 0x3, 0x10001}, {0x800, 0x800, 0x4000000, 0x0, 0x8}, {0xfffffeff, 0x5, 0x4, 0x1, 0x14, 0x18000000}, {0x3, 0x3, 0x7, 0x3, 0x1, 0x7f}, {0x6e6, 0x2, 0x10001, 0x0, 0xfb9, 0x7}, {0x80, 0x1f, 0xb2c8, 0x800, 0x9, 0x4}, {0x400, 0x7, 0x6, 0x720, 0x3ff, 0x2}, {0x1, 0x1ff, 0x5, 0x9, 0x1000, 0x8}, {0x8, 0x20, 0x400, 0x5, 0x7fff, 0xc7}, {0xf124, 0x2, 0x3, 0x9, 0x7, 0x8001}, {0x5bb0, 0x7fff, 0x6, 0x2, 0x9, 0x7f}, {0x7a, 0x5, 0x5, 0x2, 0x2, 0x5}, {0x9, 0x8, 0x7f, 0x200, 0x72f4, 0x20}, {0xf081, 0x1, 0x2, 0x7fffffff, 0x1, 0x3}, {0x51bc, 0x1, 0x6, 0x6, 0x4, 0x4543bb96}, {0x0, 0x800, 0x4, 0x5, 0x0, 0x2}, {0x5, 0x9, 0xfffff5dc, 0x2, 0x800, 0x101}, {0x0, 0x33, 0x5, 0x9, 0x4, 0x1f}, {0x7fffffff, 0x1, 0x56b, 0x9, 0x81, 0x8}, {0xff, 0x200, 0x3, 0x8, 0x0, 0x1}, {0x0, 0xfffff800, 0xaf8d, 0x400, 0xfffffffa, 0x1}, {0x4, 0x10000, 0x7f, 0x3, 0x5, 0x1}, {0x1, 0x80000000, 0x4, 0x1, 0x578, 0x4}, {0x3f, 0x836e, 0x70000, 0xffffffff, 0x7fffffff, 0x9}, {0x1, 0xfff, 0x1, 0x9, 0x6e, 0x8}], [{0x3, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1b08a3cf292bcf7}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x3}, {0x2}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x3}, {0x2}, {0x0, 0x1}, {0x0, 0xd714097df00a5df4}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5}]}}]}, {0x13, 0x6, "7ac4a66fc749f34ab2d5c0fce2799c"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_gact={0x17c, 0x1b, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1f, 0x20000000, 0x6, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x1, 0x0, 0x1, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1ff, 0xb27a, 0x20000004, 0x20, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x7d1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x8, 0x10000000, 0x7f, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x9, 0x1, 0x3ff, 0x101}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x7c5, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e04, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xffffffff, 0x2, 0xa6, 0xffffffe0}}]}, {0x9a, 0x6, "3e9e780825dc2e3748fefb4dc9a72ac3ad8f241d191408bd312930b7f8f928f41006860086b5cdb23e1f09324684174c62a403eb08cb76d029b28bffc279a1c1646f1c27672dbf8d106fd558757ad193cc6b6c928d885976e9b45c1e75a3ee7e90fc498122c7cc7dd47e4085ada9304c62bae869d0bae1e8d85ac79b32d4e937b6eb22e1bf46f0d79f92a74c4093325240b8341ca0db"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0xe4, 0xc, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x401, 0x2, 0xb1, 0x1}, 0x41}}]}, {0x9a, 0x6, "43814b8e9142f5b9c2e283719e550049eebe89588b47834744cd82a7f996e7989daa6f1b85901ea15ff5c3ba96af97aa7710ec1325aedaad01e00233215d298ecd64a1f079aa43acfdb40ce8ff9dc8d5ed673cfb540608f4d3e976d9c02c855e109afd221bd6dcf93b02a71d44886994c7c7ad7cf53ed177f81a8b00b6d77f4e61297569f09691a34ab18e1b544532106185225a4e33"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8}]}, 0x3050}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40000006600270d01000000fddbdf2500000000", @ANYRES32=r4], 0xd4}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) [ 1325.672789][T23534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1325.795099][ T27] audit: type=1804 audit(1598995186.632:1208): pid=23531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1511/cgroup.controllers" dev="sda1" ino=15857 res=1 errno=0 [ 1325.796511][T23537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1325.956973][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:19:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e2e131ee5cb", 0xa0}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x72}, {&(0x7f0000000180)="a0b9c607a990b5d6194f441a04fbbe9e", 0x10}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d614", 0x25}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x67) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x4060000) sendfile(r2, r1, 0x0, 0x100000001) 21:19:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}, 0x48) listen(r0, 0x0) unshare(0x40000000) socket(0x0, 0x0, 0x0) r1 = socket(0x18, 0x6, 0x0) write(r1, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4a000800000000000021ff000634000080b9a192b2411db67ff3d0e2972e85cdc1e6c740d8ade7a296912363f79a1d88470664b060f03fbdf738327905600cbc1709c8da3fd49f63e97c3e65b0c495caf73e7fc4044a45a2d5a0834f7500"], 0x48}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x191) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000140)={{r2}, 0x8000, 0x0, 0xdcc1}) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 21:19:47 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000023) [ 1326.270175][ T27] audit: type=1804 audit(1598995187.242:1209): pid=23576 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1512/cgroup.controllers" dev="sda1" ino=15891 res=1 errno=0 [ 1326.289517][T23584] IPVS: ftp: loaded support on port[0] = 21 21:19:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1326.417878][T23584] lo speed is unknown, defaulting to 1000 [ 1326.488593][ T27] audit: type=1804 audit(1598995187.462:1210): pid=23583 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/779/cgroup.controllers" dev="sda1" ino=16018 res=1 errno=0 [ 1326.650895][T23566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1326.689073][T23555] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 21:19:47 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000080)="b0c5f46bb04c96aa208c6cbec3bf87feb5b4a806f576e9ff9191eda634a975fd803f5b939eb715a052e4a0600d18a91bd4795b01807727e9bd9411d923a44bf6764da68c4e6be9474a1547adaf0bb01338b59da4395ee14a1d9bd71cda1bf37143fce2735c2a439681648157fad90ffe3813c67715da5a", &(0x7f0000000100)=""/251, &(0x7f0000000300)="c234ff738b66219db3a18de78db94d8809ca9974c13053b6ef3b31aca38ca75be60e9d2e9b93fbecd569b56d52ed02cf7a1a1ebf4ea7198a35cf06fbbf6ef4cb28a4d765b1cf67bb6818a4f656d5354aa831b8e37164031ffecfabf7badc0904137a4776938e58de4f0d5f895f778e46816fd894a0f6e6ce55ae557f489f295247259c", &(0x7f00000003c0)="59daa45e3c00bdad0963749f09536fc0af8d7d68b64c83323a22558f9daf5ab77c6bd69773414caf7ff72b6d8b4bc7a5", 0x3f, r1}, 0x38) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x2}, {&(0x7f00000002c0)="a9", 0x1}], 0x2}}], 0x2, 0x0) 21:19:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e91c0500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1326.796387][T23584] IPVS: ftp: loaded support on port[0] = 21 [ 1326.917026][T23584] lo speed is unknown, defaulting to 1000 [ 1326.974441][ T27] audit: type=1804 audit(1598995187.942:1211): pid=23581 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1512/cgroup.controllers" dev="sda1" ino=15891 res=1 errno=0 21:19:48 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000e0) 21:19:48 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/1028], &(0x7f0000000340)='GPL\x00'}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x20028001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x10, 0x0, &(0x7f0000000000)="480e003f0000007e5bc536944def1d94", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1327.115377][ T27] audit: type=1804 audit(1598995188.012:1212): pid=23634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1346/cgroup.controllers" dev="sda1" ino=15824 res=1 errno=0 21:19:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x100, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$FIONCLEX(r1, 0x5450) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0xfffffc61) close(r4) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x7, 0x0, 0x42, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r4}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x5, 0x1}, @sack_perm], 0x2) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4) clock_gettime(0x3, &(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 21:19:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000280)={0x54, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xc, 0x7, 0x3f800, 0x800, 0x2b, 0xffffffffffffffff, 0xfffff11b, [], r7, 0xffffffffffffffff, 0x4, 0x3}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000280)={0x54, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/1, 0x1}, {&(0x7f0000001300)=""/58, 0x3a}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/85, 0x55}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x7, &(0x7f0000003440)=""/101, 0x65}, 0xfffff6ea}, {{&(0x7f00000034c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003540)=""/173, 0xad}, {&(0x7f0000003600)=""/60, 0x3c}, {&(0x7f0000003640)=""/104, 0x68}, {&(0x7f00000036c0)=""/195, 0xc3}, {&(0x7f00000037c0)=""/115, 0x73}, {&(0x7f0000003840)=""/222, 0xde}, {&(0x7f0000003940)=""/247, 0xf7}], 0x7, &(0x7f0000003ac0)}, 0x6}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003b00)=""/254, 0xfe}, {&(0x7f0000003c00)=""/223, 0xdf}, {&(0x7f0000003d00)=""/239, 0xef}], 0x3, &(0x7f0000003e40)=""/105, 0x69}, 0x8001}, {{&(0x7f0000003ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/188, 0xbc}, {&(0x7f0000005000)=""/121, 0x79}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/105, 0x69}], 0x5, &(0x7f00000051c0)=""/72, 0x48}, 0x56}, {{&(0x7f0000005240)=@x25, 0x80, &(0x7f00000065c0)=[{&(0x7f00000052c0)=""/76, 0x4c}, {&(0x7f0000005340)=""/184, 0xb8}, {&(0x7f0000005400)=""/109, 0x6d}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/27, 0x1b}, {&(0x7f00000064c0)=""/231, 0xe7}], 0x6, &(0x7f0000006640)=""/247, 0xf7}, 0x800000}, {{&(0x7f0000006740)=@ax25={{0x3, @rose}, [@netrom, @bcast, @default, @default, @rose, @default, @netrom, @rose]}, 0x80, &(0x7f0000006900)=[{&(0x7f00000067c0)=""/64, 0x40}, {&(0x7f0000006800)=""/198, 0xc6}], 0x2, &(0x7f0000006940)=""/127, 0x7f}, 0x9}], 0x6, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x81) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x2000c807, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) [ 1327.532319][T23664] device gretap0 entered promiscuous mode [ 1327.575280][T23664] device gretap0 left promiscuous mode 21:19:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1327.724578][ T27] audit: type=1804 audit(1598995188.702:1214): pid=23665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1513/cgroup.controllers" dev="sda1" ino=15896 res=1 errno=0 21:19:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:48 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000f0) 21:19:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000280)={0x54, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xc, 0x7, 0x3f800, 0x800, 0x2b, 0xffffffffffffffff, 0xfffff11b, [], r7, 0xffffffffffffffff, 0x4, 0x3}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000280)={0x54, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000da9430c72d95aeb8840010000104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="f8a8cbfd27deba94e4349fa535a43dfb0ad833a292f708420fd60459d8c2afc249348963ac5678e2543cbe7ca53e20ea761f847f69d593e30b0c354307e4dc1dba5b4612d06231f2cc919d15bbc668a40413e2b592cb97684bec206d83dd410b8560f7d0b663f03d30b7c8caafed1c1809493fadae8487d91a9f2c9932f76a045b3640dfac32926d2c70cd069e0d1db9f5199df8487a73d47cfbf68a148598dad32ddae272ff0ec169bd0e4e72d89b5bf3c678b4955157b032d7003f9690e2d3231bb99cd598b498cd0c9f82a973"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) 21:19:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x20) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', @ifru_flags=0x8000}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = socket(0x15, 0x80000, 0x3) getsockopt$rose(r2, 0x104, 0x6, &(0x7f0000002500), &(0x7f0000002540)=0x4) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={r5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0xbd14}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0xfffffc01, @remote, 0x8}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x7, @local, 0xfffffff9}, @in6={0xa, 0x4e22, 0xffffffff, @private1={0xfc, 0x1, [], 0x1}, 0x1000}], 0x6e) 21:19:49 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000011a) 21:19:49 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = accept4$bt_l2cap(r3, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x84, 0x10, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000200)={0x1, 0x6, 0xa, 0x0, 0x0, [{{}, 0x8}, {{r1}, 0x23}, {{r3}, 0x18}, {{r4}, 0x2}, {{r5}, 0x4}, {{r6}, 0xffffffffffffffff}, {{r3}, 0x7}, {{r7}, 0x5}, {{r1}, 0x3ff}, {{r1}, 0x55be54c3}]}) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000005e001f", 0x7) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:19:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) splice(r2, 0x0, r1, 0x0, 0x19401, 0x0) 21:19:50 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000281) 21:19:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') r4 = socket(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) accept4$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0xc00) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r6, 0xe6f83000) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r1, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="c0d5fd885b4f434df002dba38f6a8f424ff716a1e1307d18d7c40cc4455c7fcb3ae0b0c02bdbb08827d50de75b1663b8194a509f3048863dbd023361"], 0x24}}, 0x0) 21:19:50 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000029000000430000030000000000000000", @ANYRES64, @ANYBLOB="a3060f2343892d39cc3445bb54a9223402d1f7dbd9f0f47117c924765774aeb5f3eee3844ad0695506fdce"], 0x18}}], 0x1, 0x4040000) 21:19:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177007f0000000000000000000000000000000000000000002a1900000000020000000300187508e14fee19299c00edffffff0000000008"], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000000064b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001ff600000500000000bf00000000", @ANYRES32, @ANYBLOB="0000000001000000280012800a00010076786c616e00000018000280140019"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) close(r3) 21:19:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:51 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000300) 21:19:51 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbb}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x18010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pwrite64(r0, &(0x7f00000005c0)="63da454d77c5aef3fc5e4fc1aa98cb8cb7481440e4b78187a7cf372a8bfe3c5012301e5d6110bc55d87e55a30a870e8e2c7b1e80c2eb88e344670ab78aa5dc7bea4c1218f963d979a9d631257285a89b5aba4aaaf5b971218e5ccab5b1d95baa72ab081091c20a91e1687053fa5104ce8eab182aacbb6153e1002cc2917a9066e923f008ca006dda7113b1b8af0ec69b0b8c08cbe1356e42e068d9d7e18c525a3d4f44161f8ff1fb987e28dd185bdee594d3e1d1372bac4360f9203ae8eaa3507a649b94", 0xc4, 0x7ff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 21:19:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100003000) openat$cgroup_freezer_state(r0, &(0x7f0000000180)='freezer.state\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b40)={0x3dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x5, 0x2, 0xff, 0xffff}, {0x8, 0x7, 0x8, 0xa5}, {0x27d3, 0x0, 0x4, 0x3}, {0x1, 0x8, 0x4, 0x10000}, {0x8000, 0x8, 0x5, 0x6}, {0x42, 0x9, 0x9, 0x1}, {0xdc, 0x0, 0x1f}, {0x3, 0xed, 0x3f, 0x9}, {0x0, 0x5, 0xff, 0x8}, {0x5, 0x3f, 0x1, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8}}}]}}]}, 0x3dc}}, 0x4040800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000805) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 1330.240840][T23757] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 1330.271777][T23764] IPVS: ftp: loaded support on port[0] = 21 [ 1330.353776][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1330.353791][ T27] audit: type=1804 audit(1598995191.322:1223): pid=23761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1517/cgroup.controllers" dev="sda1" ino=15910 res=1 errno=0 [ 1330.396650][T23764] lo speed is unknown, defaulting to 1000 21:19:51 executing program 5: socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) recvfrom$phonet(r1, &(0x7f00000000c0)=""/111, 0x6f, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) 21:19:51 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c08100041490000001ffcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "c102535a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2ab8689e4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6a9b86799"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2ed70c79e834fa81a85c6ce01e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x480c4) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f000000050033000200000008003400020000000500350005000000"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 21:19:51 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) [ 1330.785834][T23810] IPVS: ftp: loaded support on port[0] = 21 21:19:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1330.829800][T23809] IPVS: ftp: loaded support on port[0] = 21 [ 1330.878555][T23810] lo speed is unknown, defaulting to 1000 21:19:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "f871"}]}}}}}, 0x4a) [ 1330.935942][T23809] lo speed is unknown, defaulting to 1000 [ 1331.022987][ T27] audit: type=1804 audit(1598995191.992:1224): pid=23829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1518/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 [ 1331.091427][T23764] IPVS: ftp: loaded support on port[0] = 21 [ 1331.238389][T23810] IPVS: ftp: loaded support on port[0] = 21 [ 1331.245782][T23764] lo speed is unknown, defaulting to 1000 [ 1331.263761][ T27] audit: type=1804 audit(1598995192.232:1225): pid=23829 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1518/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 21:19:52 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 1331.367511][ T27] audit: type=1804 audit(1598995192.272:1226): pid=23817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1518/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 [ 1331.374859][T23870] IPVS: ftp: loaded support on port[0] = 21 21:19:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1331.583771][ T27] audit: type=1804 audit(1598995192.552:1227): pid=23886 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1519/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 21:19:52 executing program 5: socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) recvfrom$phonet(r1, &(0x7f00000000c0)=""/111, 0x6f, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) [ 1331.942578][ T27] audit: type=1804 audit(1598995192.912:1228): pid=23887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1519/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 21:19:53 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100001100) 21:19:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1332.039975][ T27] audit: type=1804 audit(1598995192.952:1229): pid=23886 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1519/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 [ 1332.350267][ T27] audit: type=1804 audit(1598995193.322:1230): pid=23911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1520/cgroup.controllers" dev="sda1" ino=16146 res=1 errno=0 21:19:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r5, @ANYBLOB="00000000000000002800f2ff0c009fe17e1b7068fd09a730a14908744ecc05a40dac07b06460381ccad206d596388df5c3d1f60d5d0ad6d65b2d460186b73b18e5b3a7cf93e412748a54a607396e53e74cdcbb4012b8a7529cc174a01a17670de8617f22c063030e538fdae31070c30466004088066bd943a82fec592aff96f89328829c4b961e52579f91c8f8b4d09763646f75ee401bbbc6ff89dd768b71dbe62ac0204cf3bd15023abfa03de7e45d7dea4e2d4db27fcbcfecfc276232a30add"], 0x48}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000240), &(0x7f00000000c0)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000e80)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0) [ 1332.606047][ T27] audit: type=1804 audit(1598995193.582:1231): pid=23919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1520/cgroup.controllers" dev="sda1" ino=16146 res=1 errno=0 21:19:53 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100001f00) [ 1332.713476][ T27] audit: type=1804 audit(1598995193.582:1232): pid=23911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1520/cgroup.controllers" dev="sda1" ino=16146 res=1 errno=0 21:19:53 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x1, 0x5) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180a42e68abb79fc0073aa58baec"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x110, 0xd, "be"}], 0x18}}], 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) r3 = accept4$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x7, 0x0, 0x148, 0x1d0, 0x8803, 0x310, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x4, 0x0, 'syz1\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendfile(r3, r4, &(0x7f00000000c0)=0xf5c4, 0x1f) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x3, 0x3}, 0x6) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000240)) [ 1332.925505][T23934] IPVS: ftp: loaded support on port[0] = 21 [ 1333.161986][T23934] lo speed is unknown, defaulting to 1000 [ 1333.392434][ T114] tipc: TX() has been purged, node left! [ 1333.420633][ T114] tipc: TX() has been purged, node left! [ 1333.473728][ T114] tipc: TX() has been purged, node left! [ 1333.497917][ T114] tipc: TX() has been purged, node left! [ 1333.534571][ T114] tipc: TX() has been purged, node left! [ 1333.568047][ T114] tipc: TX() has been purged, node left! [ 1333.612544][ T114] tipc: TX() has been purged, node left! [ 1333.695284][T23934] Cannot find set identified by id 0 to match [ 1333.748528][T23934] device geneve0 entered promiscuous mode [ 1333.799332][T23934] IPVS: ftp: loaded support on port[0] = 21 [ 1333.870090][T23934] lo speed is unknown, defaulting to 1000 [ 1334.263612][T23961] Cannot find set identified by id 0 to match [ 1334.283305][T23934] device geneve0 entered promiscuous mode 21:19:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="0dbd", 0x2}, {&(0x7f0000000500)="e0cd", 0x2}, {&(0x7f0000000080)="9f269e9496f42e79e8b1eb3f23bd24dc05540ed086f920a857", 0x19}, {&(0x7f0000000200)="e3d76a8ecb6a6d851aad4708024ace6d4e96435b2427d1c81f9248f8eed0adfde920b7", 0x23}, {&(0x7f00000002c0)="7808ed1596e2606c6f70a01ce14aa8c31749c7fa2c5318c304e0f227bb2f9253f1e0a74846185c167fa86244e7e8f67010e646db98b3566d2aeaf6bff1952acf00fdf75fd524268a1f12e3a2909516f21cbcafa6f0851cf36d4fd88387c3de3da6b7c767ab721daf46d4644a25c6b9fcd606cdc9714ab316fff3a2dd2fdd76f7", 0x80}], 0x5}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000680)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @default, 0x24f7721f, 0x7, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x1, 0x0, 0xe, 0x0, 0x4}, 0x20) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000440)={r5, 0x2}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="21020000000000000000010000000c00990001000000000000000800010000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34001e00e12e64108f049f2687b728000000000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fbdb5f251a0000000500920003000000087be593607db6be8b009a198e000000000008019a0001000000"], 0x34}}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff080002000700000008000100000400000800e500754140472ec5594300000800020029040000080002000002000004000380240005800c00028008000300030000001409028008d902009d0100000800020006000000000000deffffff00000000000000e413349768af442c6accff7c373624582ff13e623e9f4be90e6fb157943e515d07af5254370e9241557453a67798bc962fcca680127a4fbaed6ec7ae00"/198], 0x88}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000040) getsockname$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506003282835f5b9e46ac000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xe4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0) 21:19:56 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000004180)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f00000041c0)=0x1c, 0x80000) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80800) sendto$rose(r1, &(0x7f0000004200)="67410ebd17eb03439990e7618cf6f653", 0x10, 0x30040880, &(0x7f0000004240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @null}, 0x1c) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x7, "27a047372537da9a54653291e478d9490ed5f81e17ef5cc59d096f7a8994d762497906ae1a7c8ff6406e6229526c2a5787bebac84ac386d00ca679754fe657689bd554e84f4a67ae2df2838b4957f00e1fc35041567d6945b0e0c77cac51b4c0c9301f6e3eb7432a11fa61bcde47c2917472dbd5b3759cce4f92cdc6b4a7919564d0ba634c52089846169b6f135bb10eb00f712a40f602f4d88de3a15fdd2e7aff66cea255e61ad88871be5627000a8bbd68c3af1ce18f1ca9f1"}, 0xc2, 0x20040050, &(0x7f0000000100)={0x22, 0x9, 0x5, 0xc1, 0x2d}, 0x6) accept4(r0, 0x0, 0x0, 0x0) 21:19:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x18ec3, 0x0) write$binfmt_elf64(r1, &(0x7f0000001480)=ANY=[], 0xffffff82) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$alg(r2, &(0x7f0000000080)=""/141, 0xfffffecf) socket$inet6(0xa, 0x80000, 0x2) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000140)=""/8, 0x8}], 0x2, 0xffff, 0x8000) 21:19:56 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100004000) 21:19:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x1, 0x5) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180a42e68abb79fc0073aa58baec"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x110, 0xd, "be"}], 0x18}}], 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) r3 = accept4$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x7, 0x0, 0x148, 0x1d0, 0x8803, 0x310, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x4, 0x0, 'syz1\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendfile(r3, r4, &(0x7f00000000c0)=0xf5c4, 0x1f) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x3, 0x3}, 0x6) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000240)) [ 1335.399193][T24005] IPVS: ftp: loaded support on port[0] = 21 21:19:56 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="00002bbd7000fddbdf250a000000080004000c040000040003801800028014000100ff0200000000000000000000000000010c00018008000900760000000800050000feffff08000600080000001d16ca4da27e2a68da7fd052bc5b31dcbee6041adda69809c58dbbd66297ebd3ee61ef39f3d70ec9c92893ea8ec175450a3af125ec890cdbec656caaf2282d5d03c3"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1335.447049][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1335.447072][ T27] audit: type=1804 audit(1598995196.423:1235): pid=24003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1522/cgroup.controllers" dev="sda1" ino=16322 res=1 errno=0 [ 1335.542365][T24012] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1335.654327][ T27] audit: type=1804 audit(1598995196.633:1236): pid=24025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1196/memory.events" dev="sda1" ino=16384 res=1 errno=0 [ 1335.680229][ T27] audit: type=1800 audit(1598995196.633:1237): pid=24025 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16384 res=0 errno=0 [ 1335.706806][ T27] audit: type=1804 audit(1598995196.633:1238): pid=24025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1196/memory.events" dev="sda1" ino=16384 res=1 errno=0 [ 1335.718372][T24005] lo speed is unknown, defaulting to 1000 [ 1335.767953][T24006] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1335.791321][T24006] bond6 (uninitialized): Released all slaves [ 1335.816153][ T27] audit: type=1804 audit(1598995196.793:1239): pid=24025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1196/memory.events" dev="sda1" ino=16384 res=1 errno=0 21:19:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES16, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800dd8d0000000000000000020000000000fe02000000000c00090008000000", @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xff63) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0xcf, r5}}]}, 0x28}}, 0x0) 21:19:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1335.916999][ T27] audit: type=1804 audit(1598995196.883:1240): pid=24010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1522/cgroup.controllers" dev="sda1" ino=16322 res=1 errno=0 21:19:57 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100004100) 21:19:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1c25}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x284}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x56}, 0x841) [ 1336.029622][ T27] audit: type=1804 audit(1598995196.883:1241): pid=24003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1522/cgroup.controllers" dev="sda1" ino=16322 res=1 errno=0 [ 1336.069864][T24084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:19:57 executing program 2: syz_emit_ethernet(0xac, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0x0], @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x76, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x3, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x1, @remote, @remote, [], "0000340700000000c1f92557176dc43ef240916626a7c0610464db06355bfba0a4b46c58ffffff7f00000000c83f8ee3c4c998cd9909b595eeacbef851491452d6913374eb51"}}}}}}}, 0x0) [ 1336.256914][ T27] audit: type=1804 audit(1598995197.233:1242): pid=24097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1523/cgroup.controllers" dev="sda1" ino=16322 res=1 errno=0 21:19:57 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000002c000200"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f3ff00000a000100626173696300000034000200300002800800010001000000240002802000010000000400000000000c000100000000000000000005000300c0000000"], 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:19:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x11) sendmsg$kcm(r0, &(0x7f0000001800)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0x0) 21:19:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x0, 0x80, 0x30, @dev={[], 0x31}, 'veth0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r4 = socket(0x1, 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000e5ffac141400140006000000000006"], 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x0) [ 1336.475358][T24106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:19:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000280)={0x1, 0x7ff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) r3 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}], 0xa, "40f45b8370ca73591e32bdd0fd49a0a8085faa30"}, 0x33) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="13030084000000e38a0003"], 0x3}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r5, 0xd29, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x106}}, {0x8}}]}, 0x70}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x22c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x80}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x644d}, {0x6, 0x11, 0x101}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x4b}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffe00}, {0x6, 0x11, 0x100}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1000}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x2}, 0x8) [ 1336.538193][T24005] Cannot find set identified by id 0 to match [ 1336.566896][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:19:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1336.657139][T24005] device geneve0 entered promiscuous mode [ 1336.688555][T24111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1336.736149][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1336.881579][ T27] audit: type=1804 audit(1598995197.853:1243): pid=24130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1200/cgroup.controllers" dev="sda1" ino=15927 res=1 errno=0 21:19:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x33, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010358d43a83581dff000100e9000500010047"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:19:57 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008100) 21:19:57 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000002c000200"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f3ff00000a000100626173696300000034000200300002800800010001000000240002802000010000000400000000000c000100000000000000000005000300c0000000"], 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:19:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x4000024, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)={0x0, 0x2, 0x2be1fffd}) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000500)=0x3f, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) [ 1337.101567][T24143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:19:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1337.197392][ T27] audit: type=1804 audit(1598995198.173:1244): pid=24144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1524/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 21:19:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'bond_slave_0\x00', @ifru_data=&(0x7f0000000080)="92dcc942870c2b61639974a9da54cee4bb2afe93cebce738951b307c50a6a21d"}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="7ba07273", @ANYRES16=r4, @ANYBLOB="000227bd7000fbdbdf25030000000500050020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000814) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 21:19:58 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013700000000000000d2000000", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, [], 0x1}}, @FOU_ATTR_LOCAL_V4={0x0, 0x6, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0xffffffffffffff1d, 0xb, r5}, @FOU_ATTR_TYPE={0x0, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0xc851) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x1c9902, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xa732}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb86dd60ffffad00002c00fe8042b6585d000000000000000000aaff02"], 0x3a) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xba71bc3c) splice(r6, 0x0, r8, 0x0, 0x118100, 0x0) 21:19:58 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008800) 21:19:58 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x10000010d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r3, 0x0, 0x100000005) 21:19:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea5402000000", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea5402000000", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x5e1c, 0x61, 0x9}) 21:19:59 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008900) 21:19:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x9}, 0x8) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket(0x25, 0x800, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, &(0x7f0000000240)) getsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000140), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000280)=0x8) sendfile(r5, r3, 0x0, 0x100000001) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102387, 0x120933, 0x1000}, 0x20) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) 21:19:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea5402000000", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:19:59 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008a00) 21:20:00 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005070000000000001a00000000000b1b38c4c3749ee3a1f5cf0b8e7a1a1548400a40b43ed7", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000002c0)=""/62, 0x3e, 0x2, &(0x7f0000000300)={0x11, 0x11, r3, 0x1, 0x80, 0x6, @dev={[], 0x2e}}, 0x14) 21:20:00 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100008b00) 21:20:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010100000000000000000000000005000100060000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x12, 0x0, 0x9efa, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) sendfile(r2, r1, 0x0, 0x4000000000000002) 21:20:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1339.465981][T24220] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 21:20:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x48000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x0, @dev}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0xffff0000}}) 21:20:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03affff) sendfile(r1, r0, 0x0, 0x800000000000c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x111) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)=0x765) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0x1000}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x4, 0xfffffffd, 0x1ff, 0xf5, 0x20000005}) pwrite64(r3, &(0x7f0000000140), 0x0, 0x5) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240)=0x9, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 21:20:01 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000f000) 21:20:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)={'syz0', "6956db7b3ac0beee1929b2daf3630ac46870076aefb7fdf5d389c62e0a0df471dddd61149bfec69d92b6945db8b06037a2674f017baf5257b77f7315364aac277c3af71fbd8baf6d5a3edd913e968cf66546422a78ca19583684e665f73299904493027e2c1bfcd1acd9b2d09b8fd6cde54c9d0ed2fe93e8c679885af0dbef8794fcb8303f58d072a3b66530981ad407ad2a5857bb3eb51deb4c9489f03f184af8974c1b0e50032d034161fe2097dcaedf37474e99855f61fc21b3ee8639f62728c4"}, 0xc6) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff", 0x1c) sendfile(r3, r2, 0x0, 0x100000025) 21:20:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000060000000000000001400000000002d2beb9723e59385f027"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 1340.418028][T24282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1340.461702][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1340.461717][ T27] audit: type=1804 audit(1598995201.433:1263): pid=24274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1529/cgroup.controllers" dev="sda1" ino=15916 res=1 errno=0 21:20:01 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000ffe0) 21:20:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x8000, @private0={0xfc, 0x0, [], 0x1}, 0x1ff}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000a7ffffff000000000000000000000400000000000000002000"}, 0xfffffffffffffdbc) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x100000530) 21:20:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4873f60a6428f73163710500000000100005070000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) 21:20:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1340.628999][ T27] audit: type=1804 audit(1598995201.433:1264): pid=24269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1529/cgroup.controllers" dev="sda1" ino=15916 res=1 errno=0 21:20:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) connect(0xffffffffffffffff, &(0x7f00000002c0)=@hci={0x1f, 0xffff, 0x3}, 0x80) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f00000005003300020000000800340002270000050035b40b000000c9b50e7a78fcf24ae5569402bfe1ef60e3ec4f59aa5838233e641816"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 21:20:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x12) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0xe0ffffff, 0x3f00000000000000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 1340.814573][ T27] audit: type=1804 audit(1598995201.773:1265): pid=24293 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1530/cgroup.controllers" dev="sda1" ino=15919 res=1 errno=0 [ 1340.963214][T24304] IPVS: ftp: loaded support on port[0] = 21 21:20:02 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000fff0) [ 1341.022066][ T27] audit: type=1804 audit(1598995201.933:1266): pid=24299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1530/cgroup.controllers" dev="sda1" ino=15919 res=1 errno=0 [ 1341.067972][T24304] lo speed is unknown, defaulting to 1000 [ 1341.079863][T24308] IPVS: ftp: loaded support on port[0] = 21 [ 1341.161380][ T27] audit: type=1804 audit(1598995201.953:1267): pid=24293 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1530/cgroup.controllers" dev="sda1" ino=15919 res=1 errno=0 [ 1341.201465][T24308] lo speed is unknown, defaulting to 1000 [ 1341.335634][ T27] audit: type=1804 audit(1598995202.263:1268): pid=24322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1531/cgroup.controllers" dev="sda1" ino=15915 res=1 errno=0 21:20:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:02 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair(0xf, 0x0, 0xffff0000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r1, @ANYBLOB="0000000066d73d5834a1449e"], 0x24}}, 0x0) [ 1341.629422][ T27] audit: type=1804 audit(1598995202.603:1269): pid=24338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1531/cgroup.controllers" dev="sda1" ino=15915 res=1 errno=0 [ 1341.725764][T24308] IPVS: ftp: loaded support on port[0] = 21 [ 1341.758721][T24368] IPVS: ftp: loaded support on port[0] = 21 21:20:02 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffff000) [ 1341.785623][ T27] audit: type=1804 audit(1598995202.603:1270): pid=24322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1531/cgroup.controllers" dev="sda1" ino=15915 res=1 errno=0 [ 1341.821554][T24308] lo speed is unknown, defaulting to 1000 [ 1341.919161][T24368] lo speed is unknown, defaulting to 1000 [ 1342.125855][ T27] audit: type=1804 audit(1598995203.103:1271): pid=24399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1532/cgroup.controllers" dev="sda1" ino=15842 res=1 errno=0 21:20:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:03 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="b5452bbd7000fedbdf25100000000400028040000180060002000c000000060004004e2200000c000700090000000400000008000b00216970000600040000000000070006006e71000008000b007369700008000400020000000800060000000000040002800c000180060004004e21000008000400fdffffff38ac12497152320aa9708f5e049c0305603018919cd48b80f3a2bb3775efe97dfba7c43d7a8ee4216b27543f254c00885139c2d270e4bf5946d0d4376a54d5b54d7f00000000562e280e04c7d65675688c3ad5a67be5fa34bd3335f3c4eeba4ab4bb9125a8705b080000000000000000"], 0x80}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000befe22a942b4b7cb7f41fbe8636e4ad4c2f494b466ee", @ANYRES16=r5, @ANYBLOB="01002bbd7000000000000a000000080004000c0400003800038005000800f10000001400060020010000000000000000000000000001060007004e21000005000800fe00000008000100010000001800028014000100fc0200000000000000000000000000000c00018008000900760000000800050000feffff08000500ff0300000800050005000000"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1342.399869][ T27] audit: type=1804 audit(1598995203.373:1272): pid=24429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/846/memory.events" dev="sda1" ino=16383 res=1 errno=0 21:20:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:03 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1ffffff1f) 21:20:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700df00040000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x60, 0x0, r6}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x34}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1412, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delchain={0x4c, 0x65, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x5, 0x8}, {0xfffb, 0xd}, {0x0, 0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xd7}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x4c}}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x25fe6f84}, 0x7f, 0x1, 0x5, 0x4, 0x13, 'syz1\x00', "96c239880408b23a6aa64171aabb9fd16765cfc68e615906c93f8ebe951906aa", "f154aa9430b2ef95886217047a4018276eead675e07cb6b6c17de3c269a4bd74", [{0x401, 0x0, {0x3, 0x800}}, {0x9, 0x5, {0x2, 0x80}}, {0xffff, 0x81, {0x1, 0xc5}}, {0xf000, 0x5, {0x0, 0x7fffffff}}, {0xff81, 0x354, {0x3, 0x8001}}, {0x7, 0x3, {0x3, 0x1}}, {0x9, 0x1, {0x3, 0x200}}, {0x3, 0x15, {0x1, 0x401}}, {0x0, 0x8, {0x2, 0x71a}}, {0xff, 0x5, {0x3, 0x1}}, {0x3, 0xf801, {0x1, 0x2c2f}}, {0xffc1, 0x3ff, {0x2, 0xcf1}}, {0xff, 0xd077, {0x1, 0x7fffffff}}, {0x80, 0x5e, {0x1, 0x4}}, {0x6, 0x5b2, {0x2}}, {0x8, 0x5, {0x3, 0x7}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0xae5b, 0x1, {0x3, 0x3f}}, {0x4, 0x800, {0x0, 0x1}}, {0x6, 0x24, {0x0, 0xfffffffe}}, {0x1, 0xc94}, {0x401, 0x6, {0x3, 0x6}}, {0x5, 0x3, {0x2, 0xffff977a}}, {0x3, 0x6, {0x2, 0xb8}}, {0x5, 0x1000, {0x1, 0xffffffff}}, {0x7, 0x40, {0x2, 0x87}}, {0x8a27, 0x6, {0x1, 0xffffff81}}, {0x5, 0x93, {0x0, 0x2}}, {0x1, 0x80, {0x1, 0x3ff}}, {0xfffd, 0x8, {0x2, 0x9}}, {0xfff7, 0x5, {0x1, 0x2}}, {0x2, 0x5d0, {0x2, 0x40}}, {0x1, 0x4efa, {0x1, 0x40}}, {0x3, 0x1, {0x3, 0x9}}, {0x2, 0x9fc4, {0x0, 0xe4a5}}, {0x1, 0x7, {0x1, 0x40}}, {0x81, 0xff, {0x0, 0x8000}}, {0x7, 0x3, {0x3, 0x5}}, {0x8001, 0xd77, {0x1, 0x1}}, {0x6, 0x5, {0x3, 0x88cf}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x9, 0x9, 0x5, 0x8, 0x1e, 'syz1\x00', "0ff69e36cfe85cadb6d4d83d59ae414229657b386ea333bccaa27af50af7f135", "dab1b78c8c73f662f239d3861d31b441c551487d415b0f98791f32b7ccecd5b4", [{0x52, 0x5, {0x2, 0x10001}}, {0x6, 0x8, {0x3, 0x80000001}}, {0x1000, 0x1f, {0x2, 0x9}}, {0x1, 0x20, {0x2, 0x1}}, {0x8, 0x2, {0x0, 0x4}}, {0x5, 0xfa9b, {0x1, 0x1}}, {0xbc06, 0x8, {0x0, 0x8}}, {0xfffa, 0x6, {0x1, 0x80}}, {0x7f, 0x7943, {0x1, 0x3ff}}, {0x90ad, 0xb7, {0x1, 0x3}}, {0x3, 0x0, {0x3, 0x1}}, {0x9, 0x9, {0x3, 0x2}}, {0x1, 0x200, {0x3, 0x6e}}, {0x60, 0xfff7, {0x1, 0x5}}, {0x2, 0xe000, {0x2, 0x9}}, {0x1, 0x3ff, {0x0, 0x8df7}}, {0x400, 0x8, {0x0, 0x9}}, {0x4, 0x2}, {0x1, 0x8000, {0x2, 0x80000000}}, {0x5, 0x90, {0x0, 0x2}}, {0x4, 0x20, {0x1}}, {0xfffb, 0x6, {0x3, 0x6}}, {0xc25, 0x2, {0x0, 0x1808}}, {0x101, 0x9, {0x3, 0x1}}, {0x800, 0x1, {0x0, 0x6}}, {0x4, 0x200}, {0x1, 0x5, {0x2, 0x8}}, {0x2, 0x0, {0x3, 0x10000}}, {0x3f, 0x0, {0x3, 0x97}}, {0x6, 0x9, {0x1, 0xffffffe1}}, {0x5, 0x20, {0x3, 0x20}}, {0x400, 0x200, {0x2, 0x1}}, {0xe73, 0x3, {0x2, 0x8}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x4, {0x1, 0x3ff}}, {0x3ff, 0x7, {0x3, 0x200}}, {0x8, 0x6, {0x2, 0xa6}}, {0x3f, 0x3, {0x1, 0x7}}, {0x8, 0x80, {0x0, 0x5d}}, {0x2, 0x7, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x1, 0xff, 0xff, 0x401, 0x1d, 'syz0\x00', "d67b2545fb307bfb0bd8a09e941cf2d1e3ccd57a9169b4a48dfa2a81e9eedc7d", "532eba6bae7278ba5d13c970cb311513a3537e9cb21e4c905c81205746af0948", [{0x7, 0x0, {0x2, 0x3ff}}, {0x6, 0xd92c, {0x3, 0x5}}, {0x4, 0x9014, {0xbb2e73798ada294f, 0x2}}, {0xfa17, 0x7, {0x0, 0x7}}, {0x2, 0x4, {0x0, 0xffff0000}}, {0xb6b, 0x9, {0x0, 0x1ff}}, {0x2, 0x50, {0x0, 0x6}}, {0x20, 0x1, {0x1, 0x2}}, {0x8, 0x5, {0x0, 0xc6e8}}, {0x400, 0x1, {0x0, 0x622e}}, {0xce, 0x1, {0x2}}, {0x5, 0xfff7, {0x0, 0x3f}}, {0xfff7, 0x5, {0x0, 0x40}}, {0x1f, 0x0, {0x1}}, {0x1, 0x4, {0x3, 0x1}}, {0x7, 0x3, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0x4}}, {0x8000, 0xf7ec, {0x3, 0x8a71}}, {0x4, 0x101, {0x3}}, {0x7, 0x81, {0x0, 0x3ff}}, {0x1, 0x9, {0x2, 0x62}}, {0x200, 0x9, {0x0, 0x101}}, {0x6, 0x81, {0x1, 0xe646}}, {0x9, 0x7, {0x1, 0x1ff}}, {0x40, 0x2, {0xb845dca73c048199, 0x2}}, {0x7, 0xff, {0x0, 0x10001}}, {0x8, 0x100, {0x3, 0x4}}, {0x6bca, 0x2, {0x0, 0xd4d}}, {0xe875, 0x0, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x6}}, {0x40, 0x5, {0x2, 0xffffffff}}, {0x100, 0x1, {0x1, 0xfffffffd}}, {0x101, 0x9, {0x1, 0x6}}, {0x35c1, 0x8, {0x4, 0x7ff}}, {0x3, 0x7, {0x0, 0x40}}, {0x7, 0x5, {0x3, 0xb05}}, {0x1ff, 0xe708, {0xdb6daa72d5cb4e37, 0x7f}}, {0x7ff, 0x1, {0x0, 0xb21c}}, {0x5, 0x5c4c, {0x1, 0x3}}, {0x1, 0xd08f, {0x3, 0x3}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000000}, 0x852) [ 1343.063632][T24461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1343.217785][T24467] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1343.607416][T24461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1343.642303][T24467] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1343.675008][T24467] bond7 (uninitialized): Released all slaves [ 1344.651640][ T114] tipc: TX() has been purged, node left! [ 1344.692876][ T114] tipc: TX() has been purged, node left! [ 1344.699013][ T114] tipc: TX() has been purged, node left! [ 1344.719251][ T114] tipc: TX() has been purged, node left! [ 1344.739722][ T114] tipc: TX() has been purged, node left! 21:20:07 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) connect(0xffffffffffffffff, &(0x7f00000002c0)=@hci={0x1f, 0xffff, 0x3}, 0x80) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f00000005003300020000000800340002270000050035b40b000000c9b50e7a78fcf24ae5569402bfe1ef60e3ec4f59aa5838233e641816"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 21:20:07 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1ffffffe0) 21:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/4096, 0x7c07}], 0x2, 0x0, 0x600000000000000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) 21:20:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, 0xffffffffffffffff, 0x0, 0xf03b0000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00', @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x1d54a038cec019f1}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x28c, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa75e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bc0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24192774}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7551c1f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50362ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd120}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c50771}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1c5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a5a9c7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbe21686}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb577}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6850640a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25d6b876}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bc0cd47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4824e858}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x570c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3767ff77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x212db049}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56848098}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d9ff705}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59a9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcffa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23172c51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8306}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb680f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1414bd71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ea96d94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x952a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38e8802c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc13d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb39b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc236}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2982}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e25117d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4929bfa6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5a7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ecfff1c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7085f561}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x303df370}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x695a8c2d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39d68fb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2273bd20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b1b5a01}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eae7c67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x348abc5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea6bd90}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b88607f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x418543c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ec82698}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x86a5e76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x372c8d57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd58bb0}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28c}, 0x1, 0x0, 0x0, 0x1}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000500)='dummy0\x00') sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 1346.231276][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1346.231292][ T27] audit: type=1804 audit(1598995207.203:1282): pid=24520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1534/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 1346.302021][T24526] IPVS: ftp: loaded support on port[0] = 21 [ 1346.347075][T24517] device syzkaller1 entered promiscuous mode [ 1346.354989][T24534] IPVS: ftp: loaded support on port[0] = 21 21:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1346.402320][T24529] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1346.430251][T24526] lo speed is unknown, defaulting to 1000 [ 1346.438011][T24524] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:07 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1fffffff0) [ 1346.556393][ T27] audit: type=1804 audit(1598995207.533:1283): pid=24527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1534/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 21:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1346.726289][ T27] audit: type=1804 audit(1598995207.533:1284): pid=24520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1534/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 1346.843556][ T27] audit: type=1804 audit(1598995207.823:1285): pid=24546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1535/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 1347.178554][ T27] audit: type=1804 audit(1598995208.153:1286): pid=24548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1535/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 21:20:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:08 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@rose, @default, @rose, @netrom, @null, @bcast, @rose, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) [ 1347.315582][ T27] audit: type=1804 audit(1598995208.183:1287): pid=24546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1535/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 1347.366945][T24534] lo speed is unknown, defaulting to 1000 21:20:08 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet(0x2, 0x1, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 1347.541545][T24517] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1347.601984][T24593] IPVS: ftp: loaded support on port[0] = 21 [ 1347.604156][T24581] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1347.644021][ T27] audit: type=1804 audit(1598995208.623:1288): pid=24579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1536/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 1347.753775][T24593] lo speed is unknown, defaulting to 1000 21:20:08 executing program 2: r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000011c0), &(0x7f0000001240)=0x60) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001280)=0x1000, 0x4) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0006000000000000000000"]}, 0x108) r2 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000001340)={{0x0, 0x0, @reserved="fd78db880f1b53232071caa9d2268ef3d3f5c6cb34a50a4e9b4bf4ce8d041341"}}) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000012c0)=0x542b, &(0x7f0000001300)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000001c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}], 0x5, "079855bbdf13ff"}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f00000001c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x5, "079855bbdf13ff"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000033c0)={r9, 0x100000001}) mmap(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 1347.803731][ T27] audit: type=1804 audit(1598995208.783:1289): pid=24595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1536/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 1347.955753][ T27] audit: type=1804 audit(1598995208.813:1290): pid=24579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1536/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 1348.521204][T24593] IPVS: ftp: loaded support on port[0] = 21 [ 1348.621015][T24593] lo speed is unknown, defaulting to 1000 [ 1351.439554][ T114] tipc: TX() has been purged, node left! [ 1351.446666][ T114] tipc: TX() has been purged, node left! [ 1351.460461][ T114] tipc: TX() has been purged, node left! 21:20:12 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x8031, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000f700000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000001400000000"], 0x48) 21:20:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/4096, 0x7c07}], 0x2, 0x0, 0x600000000000000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) 21:20:12 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000000c0)="7f9d6fcaf7e5baba3327eb4d5ea3451b04", &(0x7f0000000280)=""/241}, 0x20) r3 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) sendfile(r2, r1, 0x0, 0x100000001) 21:20:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0x0, 0x17, 0x0, "9ab42e288c1224189c682292133a4efcefd625b9d21e97e709e742d8a81bfaa2b97467c6b81437c2936ec4438a9f8e0fb267c8ca932eebd4270237117733029023105e2018886dab49b9564c6108d6dc"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x8, 0x40}, 0xd8) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000006240)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006200)={&(0x7f0000006100)={0xfc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x78c}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5b}, {0x6, 0x11, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x800}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x22040010}, 0x84) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 21:20:12 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c01095000000000000002ba728041598d6fbd30cb599e89c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a96152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d5a3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000000000009500000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034bb120000592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b54050045f6e664ee46762c2693bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495fca4741fd31da5cc7048ba6866adebab53168770a66ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97affffff7fa0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a465483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06ddfb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357b22515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63b66c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231b1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd47ae636a5dbe9864a117d2732d750a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2b6a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f7e50b652053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b39b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc0264273d82e3c4c67a31f8723bd4a394c6b3e907adc3f86d2fe6f59dd2dbf281ff205a402056fd52bfb794c512bdc06f"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, 0x0, 0x20, 0x70bd2d}, 0x14}}, 0x88d0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000700)={r1, r2}) close(r0) 21:20:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xce}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x20004001) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) getsockname$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000680)=0x6, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000580db00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private}]}}]}, 0x3c}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="e2028eeabb176602c75671a99c523043cfedf97f4347fe7fc03135cbdd207c47f5410bfccfe68e96e53e97a526668910df88b17cff7357ac5eb70ed999d599c94022832facb029806a36324aebcf53", 0x4f}, {&(0x7f00000005c0)="a8d43487e88597f99cb0ef3521f05f1684c86e02295e4b2b307c342ed306de9af680b7b2f9ca", 0x26}], 0x2}, 0x40000) [ 1351.734078][ T27] audit: type=1804 audit(1598995212.714:1291): pid=24690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1537/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 1351.766270][T24697] IPVS: ftp: loaded support on port[0] = 21 [ 1351.996585][T24691] device syzkaller1 entered promiscuous mode [ 1352.044483][T24707] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1352.092233][T24708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:20:13 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) sendfile(r2, r1, 0x0, 0x100000001) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) [ 1352.218193][T24697] lo speed is unknown, defaulting to 1000 [ 1352.249442][T24702] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1352.286885][T24708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:20:13 executing program 2: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_macvtap\x00', 0x400}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x40, 0xfff1, 0x3, 0xfd2f, {{0x1d, 0x4, 0x2, 0x3, 0x74, 0x65, 0x0, 0x6d, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local, {[@rr={0x7, 0x7, 0x8, [@loopback]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x8, "72e7990083f1"}, {0x5, 0xd, "04fbff578aaa0c2dde713a"}, {0x5, 0xa, "e9f30ff8158e7755"}, {0x5, 0x7, "f3cc16eaa9"}, {0x2, 0x3, "f7"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xd5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @remote, @remote]}, @generic={0x83, 0x10, "1d45de7222b43062ff820d5b899a"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8011) r6 = accept(r2, 0x0, &(0x7f0000004540)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000004640)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x38, 0x140c, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x885) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000004680)) r8 = accept(r7, 0x0, &(0x7f0000004900)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000004a00)={&(0x7f0000004940), 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000004a40)=0x800, 0x4) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000004a80)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000004c80)={0x8000}, 0x4) [ 1352.394949][ T27] audit: type=1804 audit(1598995213.374:1292): pid=24724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1538/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 21:20:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) r4 = socket(0x9, 0x803, 0x4002) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fe104b67ec0001000000009f", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 1352.507812][T24701] IPVS: ftp: loaded support on port[0] = 21 21:20:14 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1411, 0x800, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080)) 21:20:14 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) [ 1353.031341][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1353.340146][ T27] audit: type=1804 audit(1598995214.314:1293): pid=24770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1539/cgroup.controllers" dev="sda1" ino=15810 res=1 errno=0 [ 1353.612487][ T27] audit: type=1804 audit(1598995214.594:1294): pid=24773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1539/cgroup.controllers" dev="sda1" ino=15810 res=1 errno=0 [ 1353.779329][ T27] audit: type=1804 audit(1598995214.634:1295): pid=24770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1539/cgroup.controllers" dev="sda1" ino=15810 res=1 errno=0 21:20:17 executing program 1: socket$inet6(0xa, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000280)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0xffffffffffffffa5, &(0x7f0000000100)=[{&(0x7f0000000040)="fb", 0x1}], 0x300}}], 0x1, 0x40408fc) 21:20:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80020040}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x44801) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x81000000, 0xfff, 0x6f9, 0x80}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005060700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0) 21:20:17 executing program 2: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000001c0)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'netpci0\x00', {0x2a, 0x4, 0x8000}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x403}, 0x20}}, 0x0) 21:20:17 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0xa, 0x5, 0x0) socketpair(0x2a, 0x4, 0x7, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x440}, 0x2000c000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000280)=""/203, 0xcb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000180)=""/126, &(0x7f00000000c0)=0x7e) sendfile(r4, r3, 0x0, 0x100000004) 21:20:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) accept4$vsock_stream(r0, &(0x7f0000001340)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, &(0x7f0000000140)) r3 = accept4(r2, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r1, 0x0, 0x100000001) r5 = socket$inet(0x2, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x17, 0x0, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000180)={r5, 0x5, 0x200, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 1356.420342][T24807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:20:17 executing program 1: socket$inet6(0xa, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000280)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0xffffffffffffffa5, &(0x7f0000000100)=[{&(0x7f0000000040)="fb", 0x1}], 0x300}}], 0x1, 0x40408fc) [ 1356.486460][ T27] audit: type=1804 audit(1598995217.464:1296): pid=24805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1540/cgroup.controllers" dev="sda1" ino=15982 res=1 errno=0 [ 1356.554341][T24813] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:20:17 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x200, 0x1, 0x1, 0x1f, 0x5}, 0xc) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000), 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe4, 0x0) write(r4, &(0x7f0000000340)="01", 0x1) [ 1356.637904][T24813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1356.749318][ T27] audit: type=1804 audit(1598995217.724:1297): pid=24818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/793/cgroup.controllers" dev="sda1" ino=15994 res=1 errno=0 21:20:17 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) getsockopt(r1, 0x40, 0x800, &(0x7f00000000c0)=""/63, &(0x7f0000000180)=0x3f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000001c0)) sendfile(r3, r2, 0x0, 0x100000001) [ 1356.839886][T24825] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 21:20:17 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000012c0)={0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001300)={0x1, {{0xa, 0x4e21, 0x4, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x7, @mcast1, 0x11}}}, 0x108) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001440)={0x6, 0x4, 0x2, 0xc, 0x0}, &(0x7f0000001480)=0x10) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000014c0)={0x6, 0xa, [], [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x63f5, [0x8, 0x8, 0x7fffffff, 0x80]}}, @ra={0x5, 0x2, 0x6}, @pad1, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x7fffffff}]}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001580)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000001640)={&(0x7f0000001540), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001680)={r2, 0x6379, 0x6, 0x3}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, 0x0, 0xb0a, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4afe44cffab0"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040884}, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000017c0)={0xfff9, 0x0, 0x1, 0x7}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000019c0)={&(0x7f0000001800)="e276b84c", &(0x7f0000001840)=""/9, &(0x7f0000001880)="a8e8b8b164b1500c1613760f1618741e23c2eda59ad5ad83d0ac2f46214dfbdaa14ffa8a591c69a889a5a8a5e705eaec68e9dff65f05ad30dea7cd27c57a433d5b60bdea6f33042a9d1a80db47b7e6bf6b5096f19d3f150370667fc7fa9e3688f4e3e8ad730a593148f3ce8e58945f0eee3c8d1a1a85f6d14570bb261b65fe547b20624e570227aa2c995e2c430d2b3764266eaf9325c12c5d6658b2", &(0x7f0000001940)="c5e68091c12e9f20ed6dbdbe27272a42f49c1997c0596da50862034bc8a9e4d385f1c9bd83916a2a974bc182d406a8c615bd0078f117033d51108fa2f47bfb7c1e61adda810b1b757caaa79275a232f227ff7e8699ff9a3744071a391a885d4dca94f898cbecd4decb7ef463c0ba25415eec74c3374fe3", 0xb1, r4, 0x4}, 0x38) r5 = openat$cgroup_ro(r4, &(0x7f0000001a00)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000001a40)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x2}, @in6={0xa, 0x4e23, 0x6, @private1, 0x101}, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @empty}, 0x4}, @in={0x2, 0x4e21, @multicast2}], 0xb0) syz_genetlink_get_family_id$net_dm(&(0x7f0000001b00)='NET_DM\x00') r6 = socket$pppoe(0x18, 0x1, 0x0) write$binfmt_elf32(r6, &(0x7f0000001b40)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xc, 0x1, 0x3, 0x200, 0x2, 0x3, 0xf57c, 0x71, 0x38, 0xa2, 0x7ff, 0x8, 0x20, 0x1, 0x200, 0x50f, 0x4933}, [{0x6, 0x80000000, 0x1c56, 0xa, 0x7ff, 0xffffffff, 0xb9f7}], "3674e0a8083e1c1ab8ed7cea5dd4337693abcca5a52dfcd20e02ea4a765a622e75d2d06fc92680bec1bfa4ae9d38a0650f3824b973d4d978c389484996989dd4dba63c7885b27c76045b3319fd75ef549cb6f439ee9a67075ae52bc3355ddb0e5213ca2f992f7630a9923954c7bb59697b0ce516869fd9450469f03118129fe5ffb85f3d3bde", [[], [], [], [], [], []]}, 0x6de) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000002280)={0x0, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000003280)=@assoc_id=r1, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000033c0)=@sack_info={0x0, 0x6, 0x7}, &(0x7f0000003400)=0xc) 21:20:18 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, 0x0}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket$netlink(0x10, 0x3, 0x13) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x3, 0x1000, 0x2e, &(0x7f0000000080)="822516338ade7c2557c303e60d65bd91da144f60025c6d786e5245cb24c713bfc56750ba1290394472cce167b934", 0x38, 0x0, &(0x7f00000000c0)="6d14712a01e88d9beee4f6f5a063b6441d472bc841e6e8f2429403fcfdbaf5d492fa0d20ebb08fc37079fd97449e54514e61827cc5601409"}) [ 1356.934068][ T27] audit: type=1804 audit(1598995217.764:1298): pid=24812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1540/cgroup.controllers" dev="sda1" ino=15982 res=1 errno=0 21:20:18 executing program 2: getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="4177f292251855b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r6 = accept4$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x1000) accept(r6, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1357.141597][ T27] audit: type=1804 audit(1598995217.864:1299): pid=24823 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/793/memory.events" dev="sda1" ino=15945 res=1 errno=0 [ 1357.198050][T24846] IPVS: ftp: loaded support on port[0] = 21 21:20:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x124, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x800}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x8001) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013700000000000000d2000000", @ANYRES32=r6], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', r1}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x402, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040821}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x0, 0x200, 0x70bd2a, 0x1, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8, 0x1, 'etf\x00'}, {0x14, 0x2, @TCA_ETF_PARMS={0x3}}}]}, 0x40}}, 0x0) [ 1357.287727][T24851] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1357.358026][ T27] audit: type=1804 audit(1598995218.184:1300): pid=24847 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1541/cgroup.controllers" dev="sda1" ino=16017 res=1 errno=0 [ 1357.440992][T24853] bond6: (slave bridge5): making interface the new active one [ 1357.462814][T24853] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1357.472046][T24846] lo speed is unknown, defaulting to 1000 [ 1357.478095][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 1357.518920][T24853] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1357.556455][T24893] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 21:20:18 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x34}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001c40)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001cc0)=0xc) r7 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x84, 0x10, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001d40)={&(0x7f0000001900)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000001940)={0x104, 0x10, 0x200, 0x70bd25, 0x25dfdbfd, "", [@typed={0x93, 0x78, 0x0, 0x0, @binary="17841512f3c003462d2e74a19118ab7450a812a2e048f6f8b3babf22ecb18fbef309bfae45dd4c5756d41b8378a9e4410d500fc234133057802445c6ebaf25a63d046efd13fdfed6046a52887887c5fd5cc36613c012255e31b90dea29d9cebbbeb6a9800d9d4d2f432a093880880b5f6ab0a455cdcb19f0b35ea0aa2d333f2cffb0d5eacb068337aedbe650a17384"}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x51, 0x3, 0x0, 0x1, [@generic="145cfae891a075c0357cec12458c6703b2e6d11c13324409c35dec10937b8b2564955d149151bd2fb4d4bd5cc2943c06439166e751f8eb1c12364024258344376b1dce3767e406df5bd532373a"]}, @generic="f255"]}, 0x104}, {&(0x7f0000001a80)={0x144, 0x2f, 0x4, 0x70bd28, 0x25dfdbfd, "", [@nested={0xd3, 0x43, 0x0, 0x1, [@generic="db714b79f040a74ee4f14ed2257ff06b62013d7abf811182a6a4b048590a23234b192b06945ff3969b9e3ba00326001fb870a6ab225228672c0079cc443cc4f7c713011c66ac1d20dcec7fcc5c8ff0f50246faaecd9de683abc2cc90cbf1d5692656ca94b061ee77a75500e7c152a6ee935889d8e4011e80bde48c4d0ecba38c4e2b2c8c48f4e2faffb359d427124c8f991ca554e256ee7068712cd9b10001e11d1ddeaa01b35fea36e0dceb697863c97e3759fb8a2a908ecdb81118a58923", @typed={0xc, 0x11, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x34}]}, @nested={0xc, 0x1e, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r3}]}, @nested={0x18, 0x27, 0x0, 0x1, [@typed={0xc, 0x67, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r4}]}, @generic="3ce36ea08160f2b7dfa1b9854fd9ec8fe0c81d43d29e0bed865768a6ffbcc1d1f7af93eda21399b199e4468b11343f160946ee038ec1baa02955"]}, 0x144}], 0x2, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x40084}, 0x4) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) readv(r10, &(0x7f0000001840)=[{&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/111, 0x6f}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000001700)=""/28, 0x1c}, {&(0x7f0000001740)=""/242, 0xf2}], 0xa) sendfile(r9, r8, 0x0, 0x100000001) [ 1357.615109][ T27] audit: type=1804 audit(1598995218.224:1301): pid=24818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/793/cgroup.controllers" dev="sda1" ino=15994 res=1 errno=0 [ 1357.731193][T24851] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 1357.785684][T24902] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:20:18 executing program 2: getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000015c0)={0x0, 0x1}, &(0x7f0000001600)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x5) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000001680)=""/125, 0x7d, 0x0, &(0x7f0000001700)={0x9, @null=' \x00'}, 0x12) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001640)={r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) pwrite64(r2, &(0x7f0000000200)="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", 0x4000, 0x1200) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e558c5986f0000000000000087695931515781ae36a4d148f269399022f5ce7ec3b6d946be4fac9508cce4df4d7015f5590bbfb45e2584f446722053f1502598808b355f7b815bdb22ba86dddc0187f894de7e81145dd688759944bd09b0f55e7ca54b07bd9189de8defcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605fa26c0e48a80a6bd544fa300d066a4d162d7ef85002024faf0831fffbb5f1a12a6f5f158a752eaf25a859b40a57381147cdd7c9fd7ceae30304783fd7f2eec79c49b69a61287b591371f3f60b34470692217a8930a11f0e0c796c587da235e5ed34ce844827033a3bac99ab9498f944fec73001fd8be2b4b36b0b3c9672af727831275017a6d5aff50c09bfc22ebf548906138e7dae98da3b8a39bf88000000000000000000000000000000339b567e58689a4da64cf31b4ea5066103ba670c2772b548c8f138af7029f1226901c86f510b46e3a027d6135f99b585d0aa73b71cd8e7448f107336ed8a46a35936d5a24a92a4e2be4b78ca3d304e40f3931319f8b3e3f6feebfdcefa894f5b2537fa42349e6957c1b0965242194e87e3ca02"], 0x18}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000014c0)={0x0, 0x9}, 0x8) write$binfmt_misc(r3, &(0x7f0000001500)={'syz1', "c9f00ff06ebcd201eabccce5c92f47eb432a4d0101b50220fb0cf6bf76c87fd2f5ada8fad3c09fb99bcebf8151538d1e334289f091ac448cae5bd1b8f8a9752cca22488267f7ac6e811fbc1fa87ef4528ede9165d59c1e1c4ce90f95f1107cb269"}, 0x65) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) recvmsg(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=""/4096, 0x1000}, 0x1) [ 1357.879541][ T27] audit: type=1804 audit(1598995218.854:1302): pid=24944 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1542/cgroup.controllers" dev="sda1" ino=16017 res=1 errno=0 [ 1357.906257][T24943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 21:20:19 executing program 5: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x80001, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff63}, 0x1, 0x0, 0x0, 0xc0}, 0x800) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 1358.030162][ T27] audit: type=1804 audit(1598995218.974:1303): pid=24811 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/793/memory.events" dev="sda1" ino=15945 res=1 errno=0 [ 1358.206500][T24846] IPVS: ftp: loaded support on port[0] = 21 [ 1358.210407][ T27] audit: type=1800 audit(1598995218.974:1304): pid=24811 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15945 res=0 errno=0 [ 1358.332610][T24846] lo speed is unknown, defaulting to 1000 [ 1358.411601][ T27] audit: type=1804 audit(1598995218.974:1305): pid=24818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/793/memory.events" dev="sda1" ino=15945 res=1 errno=0 [ 1358.518348][ T27] audit: type=1804 audit(1598995219.034:1306): pid=24823 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/793/memory.events" dev="sda1" ino=15945 res=1 errno=0 [ 1358.646471][ T114] tipc: TX() has been purged, node left! 21:20:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:20 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x40, 0x20}, 0xc) 21:20:20 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@upd={0xe0, 0x10, 0x690ee9b7eac96925, 0x0, 0x0, {{'aegis128\x00'}, [0x2]}}, 0xe0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x910948}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540200000301010200000000000000000a0000058c000e802c00018014000300fe18000000000000000000000000010114000400fe8800000000000000000000000000011400018008000100ac1414bb08000200e000000106000340000000002c00018014000300fc01000000000000000000000000000114000400fc00000106000340000200000c00028005000100a40000003400188008e901400000000208000140ffffff86080001400000000508000240fffff000080001407fffffff080001400000000954000d80080001006401010114000400ff01000000000000000000000000000114000500ff0100000000000000000000000000010c000380060001004e22000014000500fe8000000000000000000000000000aa60000e800c00028005000100060000001400018008000100ac1e01010800020064010102060003400004000014000180080001000000000008000200000000000c000280050001003a0000001400018008000100ac1e040108000200e00000011c001640000000070000000300000003800000010000b26d000000570c00170000000101000000012c0016400000000400008001000000060000001f000003ff000000030000000000000fff000080000000002040000280060003400004000006000340000100002c00018014000300000000000000000000000000000000011400040000000000000000000000ffff7f0000012c001880080001400000007c08000140000000ff080001400000000708000140ffffffff08000340000000030c001640000000050000000300"/596], 0x254}, 0x1, 0x0, 0x0, 0x4000015}, 0xc2) socket$kcm(0x29, 0x0, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 21:20:20 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1d, 0x4010, r0, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x2, 'veth0\x00', {0x6f6a}, 0x5}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0x5, 0x5, 0x1ac) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9400fbd1", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x94}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x80) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x4, 0x4, 0x2, 0x2}}, 0x26) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) 21:20:21 executing program 5: r0 = socket(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000200)={'ip6erspan0\x00', {0x2, 0x4e23, @local}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800ffffffff0507f2f5f75075322a2900200002", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468", @ANYRES64=r6], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 21:20:21 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, 0x0}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40805}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r2 = socket$netlink(0x10, 0x3, 0x13) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x3, 0x1000, 0x2e, &(0x7f0000000080)="822516338ade7c2557c303e60d65bd91da144f60025c6d786e5245cb24c713bfc56750ba1290394472cce167b934", 0x38, 0x0, &(0x7f00000000c0)="6d14712a01e88d9beee4f6f5a063b6441d472bc841e6e8f2429403fcfdbaf5d492fa0d20ebb08fc37079fd97449e54514e61827cc5601409"}) [ 1360.048901][T25008] IPVS: ftp: loaded support on port[0] = 21 [ 1360.066774][T25008] lo speed is unknown, defaulting to 1000 21:20:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000a98000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0066ed004000", @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, &(0x7f0000000080)="310b8e99d31c3d61f64142d79fc6f85b16a1a5adbc0cfdf7221363f43553f13bb78ce5f71ec2325b824b6714809bf943ff058e533fac323158372652595f0f25e9794559dafc43959054bb5181ce2503c5117e6668ea9b6658f37fbd7c2f6a1374167553e2", 0x65, 0x20004800, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 21:20:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x11, 0x20000000000000a, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18998c145903000000000000000000000000007301430000000000950000000019bce492c7551b6aabd3b1482a8966144f6b61ddfa020fb03f752a7cfbb8f25ba699eea0464820a0599e3b22e3142599b5cfc4396b03fb4b1f895193c0525d98961df8e72865750bb4ca55a3a7c48856b801013ff1d95bd8000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000001880)=@full={0xb, @dev, @netrom, 0x0, [@rose, @bcast, @null, @netrom, @rose, @default]}, &(0x7f00000018c0)=0x40, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000001900)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3ff, @null, @rose={'rose', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000003c0)={r1, 0x6, 0x20}) r7 = accept4$vsock_stream(r5, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x40400) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000600)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x2, 0x2, 0x2, {0xa, 0x4e20, 0x9, @mcast2, 0x2}}}, {&(0x7f0000000500)=""/133, 0x85}, &(0x7f00000005c0), 0x2}, 0xa0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r3}, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f00000006c0)={{r1}, "ff6eb5a2a46da7bd4bbedb0dc0581807d950c42e315e1d3c90ba2ed6e66bc12de950f8aebae72b9c337bc5ae4ac549c8cf55f390877fc2c3582cdc15150c935dfc446b3aa14d537fe2a4813db1578075210f62adfc2b4bdf664500325a36e923162cc22385d8e7bf97cc9a142928b50339b9ba22c40062cf1e006864faad9d9d9006e79670b2b6461808f5a79f91ccb129dfa98e3b660dc87cbee6d01421be040229004a72c85dbabbe4302dcc7d9ffe01fbda81c2274800b4e08b6f1535106229efe585b67002491fe61e767691f66638cae759967934f0921eec68612457cd1e67ea049cae6d5668eda5f65470ca7ada99053afd818a272e3e1f8b9aa037333b2dbe6adea8723e0c98da0b1206fff9957c6a6e95ff1341abec04242e60b2b643fb33d854cb13ed00c92531d1318bc258473fd9f70f90f825840f863aac18a6616673ec77afe437cf0cf632b9bcd11bb4b5456c99daf09271bb005a5248f9dbbac6a16f8c61f54c3052356b828fba1063f5a202e523147fffcb234c6b182fcc27a803134b90f6a6fb8fcc003cec6022dac99fbb31bfc1df808cc6c61a10e9de80b35067227b133529becc75725b9637eb1ec016232f0d768b21022c627942c20f4070d57affbaba5c3a27e91b4ee04dc34c09ea2dc3232ce6c7fc2116fca3f4acd71390d182c9108c726bb72876891c81eebe36423e624bf229db08d441f553d4e2f0cd9fa97e4371c3d9f3b6d8b9c99671d7824f17c517b79b25436c73668c158355b57487c6ee2a3d72a0ef4d4c8cd8263d290ec567ce6fe2c492472c41885c59811a4b62593b505b0445119a37fd3b42de070f4a5a9e18d8104cf23d28d18a6957eada41983b514cc9c0b26a50d32c7ef5d2cdaa9d86065f281bd743bca4605ca35cea10c048fac5796e12b5e1ff211a388a920e544ed3d7a5e20dcf4a5c6646034109853fa48302c9771e9b860bede2604c926e5b7a7a2af126ab5b7eac63ae4245ee0beea54325352c54187c7b7bc96334d5dcced9bac59f2296b9ec7154aae3799de3093c35dc6f9cb2e3adcdd355654ff7de4a45cf73427fd8e67b8b46823930ffa0f91d2f2357a786733ff74eae64b2f5e8a93324fc32ef29c73be3b87bf78ef35260e5fdd6119cd463d99e57fcdcec2fa978590c16a5d3c4471a6af3c32ad9d87b1bd0bc15d9190311a61b2261937f9cd58a887a6fe79fe649cd722bfaacbdaf81896637f2e42353f237be4df5d8eceaee8244275671f821652193cf5f564a9ee1979d502b90fa4c620515eba0369b6c7b08e5cc0a4bb41a2a5c42659506b0397746245ac9095e9fdfebfe12acb39d1bf917b060845c1bc0177640d18e52edad88bb8bccb09573b6666ce1a206b02769038aed706772a14584e4a3237fddafc5cc83c96887c5db0ef7dcc73bf46614395fc389c8fba38aac9cc12e8023bd88cb0b1473039be8b5db6f1d66aa06985c5f0c16853f324fba20c8354e37be84deb1afa2066d4ce64e3d0a14fe2fc1652551167f47acfaf72798785786766b8dae6ef8b904cb78cdcd4a4d639c59b2f96d183ac70ef9971eae5af9647afd132e33281a19fc4b53639d78a01263e4027cfcd4759841015c365196b97f4d41a3aa4d74b0dcac8199f660456df1f9b90c89640f05af068015bed8268eeb616e6dbb81fec5b65841d1505d4f52289784449d16fb94155efc6b16fb9cc7b1766869978ddeb33469fd2a440f8610eba2bec7611f974a0fc1eaf4cc6cb7720bcc3e46629b38294b85b2ead58556268306be5c096fbd1a1a56a10d69d3aa5853430d3e366f9a7804478b9273c12532a7ae10e17050f726858e9df5c294115a1b8114ed4c87684db15aaa755fa3d29d44b1189bf35aba80885dcb0c6e7c072a7c69a8133b03085b53b4231c97a90a46452bdbdcbb858db93d88770ef8a6b4c5d9a91e92e2f80d1258f631503ea4219af0b32961c5231bd14d3df87d428d65b383cbdedc91704f355a961712f90ab47058d64a1e8fdaf6ec09e8c3276dbba860d7e5bde4e661e02bd56b1c5a2fc1eacca90dc301ec5757894e31c8287137a61cc4539131024c9784fa4c50e08e6aeed486fe6b4056817b60f85cbf6e226674a8a4ba021412ff012fe860ed7bef18cfbd88f76d74e2cf16400f188ffd9ef0b0b268e99bc50c43e7033e7520aa6c08b3965766efc0db5168b12864cbe8ae33d99c73793c62ce1ed8b2b2523f336878fb7e3cbe88c514b58af33b21c11c16a427b6406731f54ab9263e49f1e491e87c73e4f1b75e0f287462cce51bb0c6a64345cc74c64e98648690a12d412460c4d315d22c83afb7ef420524979829800a5f6d57e92772ae4077d3bed7bb89decc809779b1b38c4401e387ce7c07910e3a91830bf6ce42d8ccfed2b0f1d56090f5b7080bfd3097b651ff9ca739ce023a0889ba4f47a721f1351472708599842cc6e9d7b980a9560e2ed7c230c6fca9863225246d21c7a2168dcb31570d79f5b5cf68d365a15dc78b792104b0366876ab5415a7ba1ff66428f5e095cd9951e9e05bed42d849ec2e38db07d7fc623be037a608d0640cbfcf874db9059d1b258f10f73444c43f31409d826669e8739d470b9f20eb064a7a04eb614dded679ee0c96a26ccbabbcffc33a6508d34094ebfe4e6492d5c727fff5947ec2ec671371ae2388cc76ec7a85a7bfe85bad1630ca36e6f4d52e31544170fb3f5790b67e420d8924ddfcb10901c36608faf85c1ba3c7f75bd4aa13e35ac6c8470a3eda82a02328b845d7c837d2aafd5d59b8103969e35837a97de2b41cc37aaf5e11f59e6b1f41df2924aa027108e61550e6c0ad7e17c7b92b9c5a845f85e77e7d0c1cc7dd0fa391e6957c446be532f084b83b40d1a0637077c9ab4b5f41aeed594dda1c52c2a56d3ee250c8e2f851804c6ae3fe627a5a17010a072cdb1e3085738cd149b21c6ea194dc566377ff2608c91afdf9da94b2766bdce87e4246529d83955148611936246edd73feb8eee6ba788deeee09ecab86521e339558c4d07d4c0c12b5b5956a5718292c2d17c0d1e6e77415cbde595c576168e965b7e875ddc10e5f686ffd9f5eef536aefdc0685b0ca4bcbd83f5f232e4c933d193af70e1f2e39424dff34af74cfb89cca4269ee3daad623f63366ca6cfd114c8e856b0f84eefae5515dc9a72c4c7baa6564d3b2bdb482a98dc8ec2aa04c810dd2751f495ee90ebe7b375de44850a54d0d10a387ca054b882458ec4a3414f28c4b8743b131c334a910a162951b7982c6dce31593ad890187a91e8dca2e278e2af7e9d42d66f3bdef7d838e4044eeba8ab082ea4c0748a452cef3394e93c502fd1e058d8df13a202777ef90631a4ad17e4646cdc074a134ccbabe0d6d4bcb29fc6963e1e4c74f45273fd8e94798c92a6820c391a0d855496e4d96ec3b73277c35ebfd9e0e8bec848f3b5bee50919c25a81ba6556adc47a982fdaf7a9dbf49f59ee4f3c768d28fa0c4bae4d6018ff9f8503cdc755d16f26fcd2d4c4e99424997e09cc0d6e8b02911ea95a456ee97e2e98cd13545546b31042baf8843bd7d5a7ed0ebd660130a4d6b01eb9b5111079dfd8a0f95db284357452961422eb8b8f26489a8d4d9eb9209e0ce294780a48f0cdd295ef685a10be9d36d12f4fa993f985b37e3a05dc5f2bf7f9ff2c8606cf453d1909b00d0ea7d4db36b6e954b486ce0483eea366a68c914646b30dd96cb342942476904377d11aa7661f8175301dbe4f61ddd87f4bb1ac27b501f7d637aac2e1bf1df62b4613131324489b9330048a3d057433ef316136427932169048ed04f7edfaceb24a7d7a5ea7e6acf0d64bc6e84a4ea62f9f2ee7298f2e316e69f0b9dbcf357d3da81e0607d8ecda68f5d53ae2c8da801adf2a923052583c2b7a5b16b76c5f75c91bdcf253fddc8ee00ae5000cc4f43baab221579916d9aad27a2acd1c56dacf25b11dd551943404abe805d9bdb16c507a3fa567d99932996f2a388708f2ecb11c31696682dd6018f12eda1a1596cafca05098f06ce25cadb9b26e5bb42c19cb6521a7a74680c68dff301b87560a405bb492fd38c0b2ea2cb799399122e564f8ebd356e149d88c31c27cbdf27b58eceadb66841465386025bad6e7b5eabd300f31ba2451b49256fac4792a13a5813dbb48f1b55ee21afc818fa77ee032e81d92d8afb5eb7b7f5875ab89854d34d9de5397916e1f8cd616efb3328af8eeccaebb8226e93233e53b1f083326a359a265638b7a1d02688bc66b7ed28267e164d503aa18548f29252bb70fe2acd2da162c2966a1ca954b47a39b73f914a75a8e8f59825886abffc8e1d154be7eba270a961735a2ea17d19d328174b4e7956ec18f33a64baedc64ac6e0772f35ed1f502beea2f97440a853c27a577ea9cf8b2e2ba2f41e713b93317eae0e991981648b2e97fcca5c67e57654a7baf0fb9eb600703ae1e38d8619b66c71d1843186fd9cd62a29794f3e4fe2c6d044c0b7d8bd501484534ec15215b3667bfcf4ec07d7958e735db90d61c4bb3ceecf183ce573cbf414ac9e0d6808598f4514616657374118b74496540fc322e7d21d26edc1971ab7a11db78bc05759c679c1fc0e0da5abca52df733c300f735dd0146b3060862779880b9ae8d3036b117599b736ccf6d55a8b4450b5ea6f86b3bcc0ffcf7a4b0d4d4de73d41c293d31f4a461cfcffcf1a934aef8b13fa02b2e0a403b45784a896c77d3cf53a8f1e0ce779b8749ffca6e39419a12d0ddef2ebce89971de0a163e44888805fc9997f851bb07b06cfa99cdb71e54e1734ebcd01cb2cd5b046ea46d13720f30ea7b18129b69e663a4e9679ccc577dddb3a0a1faddf0363740ca2162c67e7ee3f10b86b25e456e3316258312900de8a5dddc7203b7d421723daa849983245c5783382cad1231be1d1d0b24617d1b05ddb72997336fc5bbea7fa79868e91a675790569ac4ce603fae906147725e8645786f8d114de5c21272f786cb878abbe6d81b8577934e30918a70c6bb999022d1826efd7f5b3342a6f11a639fa77af88163faf6ca1640d0e745853a2c8e9f287c7fd1e3a8ff5411a7d6fcb8aec99054b6c5d1e37395563d028351e8c1ecfedff35dec66117db739e67e19a1d13f434cebb2675007045a73e87c2ea0e42c5a7def29d081d4dfabed3f00d50455285d00a0ad681f3e75b1ee177bc9ce85bf033ab7a21af24cb5451ceeab4b4a58291c0ffdc98c90055e68d573299612cf3421a09e1627fb80b2ea03cd48d01ee875cccf4fdfc9971f89ee98bdb30a53e3378302f0f21e018f81e78dd0cdd6f86b3b751b293eb628c4fe0a7cddff02df7155cb9ba20c4b7544c721d2bc4b1c1c3658caa3cb318d80e847a59581514364f0246eb09777be37c13b522b321548d8036adaeafcc258ef73084f8488bd669de7b122ff31f6b4e738f89372b34611aebbd7f8a0f3f52bd7694566f02168c7c7035b7ece5bea98d2eab9626783c5995a4b39757f9991db1cacc29510d569ead91f36e80791f7011e4872301673d573d361c90138f1b345f9cf06d4405efec0c205fe5cfbf951ed084a5c7002195ce40457f226e6fa1b5b0cd31b3ce0a4289b15b8817ab612dea76bbeb236f2574133ac5113cca9b69aafbff3d27df1b42a4379ec9f8411a0c31e76672c4cabe3c211bec106b98233db6d36141afbddf185b73e953782e2f8ecef682392fe30b42ec9343237d44a7f9307d237a30c8015d270af2ed656b349990e0f84902bc707cf0bc80e7348bb081aafdae4d37d10484"}) ioctl$sock_netdev_private(r5, 0x89f8, &(0x7f0000000100)="115d824f0cad1d100242a5e7e8289405d93ecb6bbd2e2efdcb4403d7db898cae328ec821") write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a307a7e253c97"], 0x9) 21:20:21 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={0x0, 0x0, 0x0}, &(0x7f0000001240)=0xc) sendmsg$netlink(r1, &(0x7f00000012c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000001380)={0x1010, 0x13, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@generic="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"]}, 0x1010}], 0x1, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x20, 0xc010}, 0x20004800) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001300), &(0x7f0000001340)=0x14) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002b80)=""/157, 0x9d}, {&(0x7f0000002c40)=""/114, 0x72}, {&(0x7f0000002cc0)=""/153, 0x99}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006940)=""/58, 0x3a}}], 0x7, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x6, 0x2, 0x6, "11bbd7775c777b7045ef0d4763d24489d48b8efc297823c0dd3519afb36b407901641a70a66d364ce759329e88288e6df0cfee463d1a7658bc266d0e18442a", 0x21}, 0x60) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x1) [ 1360.449435][T25054] IPVS: ftp: loaded support on port[0] = 21 21:20:21 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f000090c000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1360.528153][T25054] lo speed is unknown, defaulting to 1000 [ 1360.670574][T25072] netlink: 40371 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1360.726181][T25072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1360.868112][T25080] netlink: 40371 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1360.906831][T25054] IPVS: ftp: loaded support on port[0] = 21 [ 1360.910082][T25080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 21:20:22 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={0x0, 0x0, 0x0}, &(0x7f0000001240)=0xc) sendmsg$netlink(r1, &(0x7f00000012c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000001380)={0x1010, 0x13, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@generic="e1827571334b3fdb343ae7d9d1e900e3d436e0fa4c0810951490c7c0520bad3fbbf0bcdb0d1aba58806e8d800bf7c30e55fbd64c1947761c28564ab95c31723622d06f2a090ec326d1130e29ebb45cf2746e07efea6fab2d29a1f3f48cc205a9546d1485096131977bb70f4fe2396a51dca8acee00b61f69ed7f2a47263103ce5659bc4ab2f55bc84bb86cb23046a39f304a380251dab137e4ceba6081fe9171c5b026236ebd61485c580d84fb1e2827e380333ddc09909fd8b979cdacd762b66200a685bf84bc76aa68798bcf9287629be1e7e386cb54106fefc5a8da336379c5e25c6fef3d777352ee9571fd0876ec91ef4df0f6c6f1ac4260e992c538cc0d18caedffc6a031440d092a684b33055ed555d0b15aa188be582ca30fa829154a8e9fd31e486673c86b0aa98ab7bfe18161d6a2bf9dcac7e9334b1d6977d9f15f5b3c859fe0f61acbfdbe81feec21de0c3ff4e3d11b0f350412469e3f94596d464462380c54c45ab917e60b7e86fa6f4c92dbdb2cebcefd26969d328f61283d3f610538da1ada8cfb623a74c48cfaf3d5d7bd34e75d61e3f48bcef7f66faa7006f23681e77c4dabbb6050771ed132e10804ae168b5ee420dfa365470c8d1603fc215fb140a09cd4c082137ad16fe5d1ee600cc3eb35ea28d455d37e858a7587c0fb9da0a6f442a3cb6de76a36eeca40aadc9826e6437bcb739dcb12554f3321259ffd30c6f15ae16153af96357a1f6a6b9540595bef958f7881277f832471a013771a8041636554df97443231f794392c4c99a17fa002e48f57328708cba05271e57c8e8909628e1010e6e5483d6da4d6cfad16f784287d6be1d93c9397687fbf8fb566171c5aea6a3ff91f7029953c427d255c8514645a6f4adea65d8a33392b3d4fb6e946a6277e95231e3d872536923a3751512190f7b552acf4d0f5fe3115a546e83ef52088b40799f7e3aacb9de474f9256b57287bd45d544403e1d7db367619331fed8f7b9b97b3b52946f767dfa5cd4db1f6bf05c140ad5aa10372b427471d5776e190b3738cc285aecb2d14b80b34a0f281a67988992747eb35803b065b03bc94a4a4c328cbaa500d74775a04a6d23b0cd081f9b91bcc7d420ddcd5cd6b3cc619e0ac0b39e0fbb24f15acd33cf55efd060db776c4ce5ded0d655b0dff0fa80891bd1776377deda48510418de461336c8450fb0ed170fa78aa800a7abca1bcacdd97b66d8a750c4288c79cc754156066c1b8a5184397e209c8993fe0cae25043a5ec882dc579f3695d1c6bb59a02df0e54b30e905acab38c9617798491cec0d732473c5cf473d3abe1f2d30b700a8918034d2b249afaa6d98c3c1812e246ad057930b1e192bb68d3cafd51246d1152451feeebb61239c94316528337c9e4dda7688c83bb68fcb471e69cf6488ce57b04b4d8c4853e4184b8f4593b3307ee8d1b1d402c62dad81146191e168940b5718f1a79c484678d13b7dd2478737c645713dba9a4427ccd959eec28dfca35d92f28fc030880610c5f803dc49d6dcfda9505f249b182e3ab3993dbd7a606e998358f4c0c898a13039043f3b831672ce191fa5ede315d6281072ff3caeb7510fdfa189c72262fefb2f58f67fa68b03e6e95a2c9270d85b087c914005cd36c2c6483d0e4a7d01785f800fb35fe6fdd9b16906917b6421ea041affbca03bb4f533fe5b75c5ac4a83eceb067424a71939b2670a1355e3796639319160322795a8f07a3331ade8a212c7161c65dfe377c61bcc83b8cc515694c355807ca3b88167101362ec9f983380d15f18567e5cd0cedd2cdbafad460798cd8386763c0f720a80014f87345bb01bf2f1d1428f0f94d005ae8917caaf5601b1a423cfdd58c57194ab109099baf6682292737a15fdd07125230a5098db67b0d23920e4b6ad95679037a888699c3391c0bf225c85c13ad61ed55ca33f1cfb156be539eb76a13360eff1c9ecae0d8eb782efe4a3dcf9fb8e14cc414f8497e600fea6545a514cda4a59d6c9caf819dd1530d74d6795b69d27bd56d158dfc1d0795729d850c778b533fce8315ba12c5138f9aba5a7cd57e78f010ecc24e13c84f1e4a10382edf11c6a9fb8c3259db777b2d469ce1b04202433de04b481fa20c509a20dbbfe2c9b3d17e41cb1cef9a557034ffc2ef1e43c01ae532d86876065678abe0c0d2773bf13e1676ebd10726f9fa7333b1c4a37cd2d96755068d2825274ebc2802e7127914675e52a0087f6761079ae45d588f810c553cf6f21a968d571762369b0ed398a769ec8e57e57dce12f5bd91dc8767879ee044061f97c8b3fb9d122d520b43dfe65462d37c7044f875373e697531c230de8f9a6612f8476e2255b80dcdea731d9ad5921175c11800c9e06c6f6ba20943819d7e3ba25fe56103817d8ca050ae2062536bb164b9211687300a25b6903e3ddeb834d0c8e2f4ec6f279497caad25674b8f76eb2889357542b70113da7732968f50353f9e565967602702f65a9d3d83af2fa8c0b02feff0ba91499b1b10be51a74fe80fabe3d231b9f6b1e4fa8df2da93145acae935c33aae94465b48031ce8cf8d648717202f3fbc5c8e8d49b4e61dd662e10a88206cb34653bf1eee60e649f57623268d2ccd94d1ad3df2ec289417977e567325bc131ac5642c53bc03f4a1a4953cba4851bade479fcdf5f93f485fa846e159ff93dc84b5bbcd2f427afc3c2ce6af4a64f81a3a58905181a673064e87f7d94c701c94f6d4a57ee0456f4a5024ac28c3b67e4ece7cd604ff7db70de399fba1f8c329f9a99a208d6fb269adc2cdc440c07c98abf1c7ddee5ec36efa5174edb7516e92c2ccd7e75692e2087cc4202cdc3aff21d2b3d552a166587f8b003b34eda1db4dd7f639b43477cdd4f9a7562a0416d63d2b0df74f04e621278749a4e61d6c2465f6974549906b3e766271528325468d38488b8acddf569477e32eae7988f1b971fca6baeaa32b6ef9f7e96114422c53a7c37803e0739bded12a9a1b74b8ee437dc6230405acffe10a6b54327cb12fdb9bc269927145ec26333ee6dfbb0b278b4f78b3d9bbd27fba9dbb1b390f9ce7e628b803d272e3cf1755f410a38b384f52e4607b41f275afda35f513a3c4eecc6606a9ec0e37dc19ef1907f1b9103a7fa8344d60c43968e087e53eabc3de02c1908bddf547ad4edf7bf54893162f97bd31c09020280547648f869ed9e10f53c94ab601e5218ff5237d5525169ab23d51fb17229b9442c10d0962c20d9eb96f8f01c1afdb78b641d5c87bf55bfbc1dc69cff753b33d0275ba765f656601d9b7e54e185166bfd9e05b1964dead00c86f4dcfc3ad8b438be0b9cec60d727ee3b8264712d95ccebde1fec8ac7da61809d5f25b42977d0a4c7b8fab9d22d1e9048364d215ae8019b6e9a68cd4e5ff698c479b649fd671fed9cd8ef0421c0e7344422348bb8f341067481c34a0ba927d1a1a240853dbfe579291d230fe9fea87c7b2c67b207931287fe561d76e4d8d92fa3713887a216f503a8b981ce4baac86f5cb82d162139400912f6120cf44e7f2a43701546c1092b014dd905a77327579c57afcb54cfbe9b17987edd896d426d1bb5cc4e5dfadd68aa0703b92c8a649c3c275f4d04ae69e7298413ec416455c083fb233b9fb6a4afc0526f33f753dc21f3c8258027be81a902c61382871b0d953b92b257811e5294d156cc3639628fedadc036f6fa17782dde5f2393959c749a76b8593741f0912110234aed2c154d3d11c1fab30874f8fcc0e329cb732e6c7b80671a7c9c8adf3c9aa22281cef4638828ed3d5d3ad2b603edd306105d371cb87fc35fc954461491fb392b7152b891ba6c0466ecccbcbdfdfcb2d70a35b98bb5e40b6f54342437e36d57fc76c43c37f09432913af4ae4b3e19627b1cb5bca9a67921d57d24915ec4fd211e9ffdcea7df78f8c1e290c70e20594e4f5e64e88d500b214cde015c73ddb27296122cdaa78eabf87c2cb8fcbbb0d66ba5f549aba5f5afd421e291dababd8da78c92302c2093a0a0142bf96f0b2f74ae5a2e8870953f2b6f9b419929b1020d791f0bfc74a92e9a78276db79f607b94339ea1988adc3b1182eff87913d0bc49ff2fb9bfc67650217fb875523fb81c952d8fc29c71d5095ad86efa2833a8d9241c9a9fc1c99e8a16fecc0bf1b2e6ccdaa053b8cfa9c4601f2dca29881386eeb1f97fe281345efaf3f237d0e6ea12f0600b15a6493d2a1257cb2a2b16449d52b5a5bd90dc62d82bfe2a4880bf2c25c34207b0c9b51422c0c51de8db285bce28dae2418f4e8693ddeaab66512617e265398ee458ab96f689712b49471050bc875966714f38539109db27990ed5947f0bcc18800cf705a3c7222d30f3decfe1cf698fed6440e464155268014803cb2ab3d073c989968eab5ad710c55afcf29a1c6d5db401a1afc83196cb3af00147b4d8aa8c5698794ed1c4d456b6855894f80a7297fcbb2bfd27085270dfe496e30afa306ddb611e1586fa5b44ab482c06df887ef461872678a3c8c1806886a8b9ecbbaf47af21aadf6eca1cc9564d1a4457c823a6d68d1b5f9762304614b4410041653de58d058ef5ced5b34d3989d1881b2323bae841cb866a3be4427e32a00f415e45ef7120bf48ee58830896e50b8e58b06574998fbe18ac5bbdf27b23bdde5fabfbd1029eb65b3f13a14a64baa74ab9dd9e64f047014d51628de8080603ce4ea94a3070a708c40975054a8bcd231d77dc63b88f54493ef64809c368259219fdfb31e49ca320ea9add3727d535e9629017e4ef13b7584e5e144398f36621fb22e35aacac18fa2f0fd352e3a93c4c8515774b309e836310cd8dbd40836f721445de76189d3656c1e2d6ec845361bf419088a1cd001b9d4ea937aa6f7094b727265426c922e9f7bba7cf385cc1f1b069cbfa34be539b9653fdf94244371dec8acfebfbb2586f17e78aa8e5104e8dd811bc9b545d9f4cdbf545e0456bc28bb99994a050b38d84c3909fb514534c967658e8757ad08f32ea4dc2f5575f049897f25b3360c92d59397288bb79781c033734cd11a56bb383d315462305d92b4ba4ba4b29e8b41b39743b6fa92db8031e5a9121044ef7c14d09d0e0079f4dcb3af958e0b9e4147234787bffcb65e2ae80716042c8ed8363eb29c4c88578ad790b5dcbd7c9a6d937bf5e4ec7df3f8ce013b6de827c59cbfbe47c8b38eb0aebf28ec0bb90e18fcb4d958916e7ffaafe34522f63d3bf5e538cde2abad7453efdcc673cea05610c6b56969a389980587fba6d97413383a1eacac499cfed4e9a634cc349753266768b46ccda6828c25ff8c98fa2e4953283f86d745c4effed19c504d560d30becf93fcebd5252ff9134f0b3ee82991203a4b23aa3fd676951357ce9e550530487cd29f23a025917efcead9c2eecffba7eda375648b8d0e4c8f19e3c6d0388a9faf72271328991eaf9703f52fcd3bfed7ed4d0f5d6cfee6743fb9beab32dabff66f3c0188085f82973003622d6c94219562e7da4205d14c7bdbdd1165c6ed11c3ea9e0121a3668d869cfdd68104617a9662e971048fcafa155b73792e3d20577ccbcca72f4a875f03e2586b9259c4897f49a1f2f96c48f5ee1b30313d67c2d6f1593fb06adc8b5981e6d0423a5d9dd01ea501022aed4f84ced194bd5dc68ba349e304e03b4f3a9a3403233af99486efc7da7151eb9eda7f5d602d3684b93f8b30b5b112ec4464f15dc717d26c427015badaa095b5c0c0b8aaa00a5956b15a8fd38dcc7ac326fa536a1be077e9a5f1c5d494610c5889df0525a33f5b"]}, 0x1010}], 0x1, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x20, 0xc010}, 0x20004800) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001300), &(0x7f0000001340)=0x14) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002b80)=""/157, 0x9d}, {&(0x7f0000002c40)=""/114, 0x72}, {&(0x7f0000002cc0)=""/153, 0x99}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006940)=""/58, 0x3a}}], 0x7, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x6, 0x2, 0x6, "11bbd7775c777b7045ef0d4763d24489d48b8efc297823c0dd3519afb36b407901641a70a66d364ce759329e88288e6df0cfee463d1a7658bc266d0e18442a", 0x21}, 0x60) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x1) [ 1361.245615][T25098] netlink: 40371 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1361.305473][T25098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 21:20:22 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={0x0, 0x0, 0x0}, &(0x7f0000001240)=0xc) sendmsg$netlink(r1, &(0x7f00000012c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000001380)={0x1010, 0x13, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@generic="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"]}, 0x1010}], 0x1, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x20, 0xc010}, 0x20004800) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001300), &(0x7f0000001340)=0x14) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002b80)=""/157, 0x9d}, {&(0x7f0000002c40)=""/114, 0x72}, {&(0x7f0000002cc0)=""/153, 0x99}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006940)=""/58, 0x3a}}], 0x7, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x6, 0x2, 0x6, "11bbd7775c777b7045ef0d4763d24489d48b8efc297823c0dd3519afb36b407901641a70a66d364ce759329e88288e6df0cfee463d1a7658bc266d0e18442a", 0x21}, 0x60) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x1) [ 1361.643821][T25107] netlink: 40371 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1361.692853][T25107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1361.845400][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1361.845416][ T27] audit: type=1804 audit(1598995222.824:1313): pid=25103 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1544/cgroup.controllers" dev="sda1" ino=16161 res=1 errno=0 [ 1362.652466][ T114] tipc: TX() has been purged, node left! [ 1362.660940][ T114] tipc: TX() has been purged, node left! 21:20:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000f8ac020500010007"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) 21:20:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000100)={0x20, 0xd, 0x1, 0x7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = socket(0xa, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x2}, 0x8) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x66, 0x707, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_PROTO_DOWN={0x5}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x200}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:20:24 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={0x0, 0x0, 0x0}, &(0x7f0000001240)=0xc) sendmsg$netlink(r1, &(0x7f00000012c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000001380)={0x1010, 0x13, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@generic="e1827571334b3fdb343ae7d9d1e900e3d436e0fa4c0810951490c7c0520bad3fbbf0bcdb0d1aba58806e8d800bf7c30e55fbd64c1947761c28564ab95c31723622d06f2a090ec326d1130e29ebb45cf2746e07efea6fab2d29a1f3f48cc205a9546d1485096131977bb70f4fe2396a51dca8acee00b61f69ed7f2a47263103ce5659bc4ab2f55bc84bb86cb23046a39f304a380251dab137e4ceba6081fe9171c5b026236ebd61485c580d84fb1e2827e380333ddc09909fd8b979cdacd762b66200a685bf84bc76aa68798bcf9287629be1e7e386cb54106fefc5a8da336379c5e25c6fef3d777352ee9571fd0876ec91ef4df0f6c6f1ac4260e992c538cc0d18caedffc6a031440d092a684b33055ed555d0b15aa188be582ca30fa829154a8e9fd31e486673c86b0aa98ab7bfe18161d6a2bf9dcac7e9334b1d6977d9f15f5b3c859fe0f61acbfdbe81feec21de0c3ff4e3d11b0f350412469e3f94596d464462380c54c45ab917e60b7e86fa6f4c92dbdb2cebcefd26969d328f61283d3f610538da1ada8cfb623a74c48cfaf3d5d7bd34e75d61e3f48bcef7f66faa7006f23681e77c4dabbb6050771ed132e10804ae168b5ee420dfa365470c8d1603fc215fb140a09cd4c082137ad16fe5d1ee600cc3eb35ea28d455d37e858a7587c0fb9da0a6f442a3cb6de76a36eeca40aadc9826e6437bcb739dcb12554f3321259ffd30c6f15ae16153af96357a1f6a6b9540595bef958f7881277f832471a013771a8041636554df97443231f794392c4c99a17fa002e48f57328708cba05271e57c8e8909628e1010e6e5483d6da4d6cfad16f784287d6be1d93c9397687fbf8fb566171c5aea6a3ff91f7029953c427d255c8514645a6f4adea65d8a33392b3d4fb6e946a6277e95231e3d872536923a3751512190f7b552acf4d0f5fe3115a546e83ef52088b40799f7e3aacb9de474f9256b57287bd45d544403e1d7db367619331fed8f7b9b97b3b52946f767dfa5cd4db1f6bf05c140ad5aa10372b427471d5776e190b3738cc285aecb2d14b80b34a0f281a67988992747eb35803b065b03bc94a4a4c328cbaa500d74775a04a6d23b0cd081f9b91bcc7d420ddcd5cd6b3cc619e0ac0b39e0fbb24f15acd33cf55efd060db776c4ce5ded0d655b0dff0fa80891bd1776377deda48510418de461336c8450fb0ed170fa78aa800a7abca1bcacdd97b66d8a750c4288c79cc754156066c1b8a5184397e209c8993fe0cae25043a5ec882dc579f3695d1c6bb59a02df0e54b30e905acab38c9617798491cec0d732473c5cf473d3abe1f2d30b700a8918034d2b249afaa6d98c3c1812e246ad057930b1e192bb68d3cafd51246d1152451feeebb61239c94316528337c9e4dda7688c83bb68fcb471e69cf6488ce57b04b4d8c4853e4184b8f4593b3307ee8d1b1d402c62dad81146191e168940b5718f1a79c484678d13b7dd2478737c645713dba9a4427ccd959eec28dfca35d92f28fc030880610c5f803dc49d6dcfda9505f249b182e3ab3993dbd7a606e998358f4c0c898a13039043f3b831672ce191fa5ede315d6281072ff3caeb7510fdfa189c72262fefb2f58f67fa68b03e6e95a2c9270d85b087c914005cd36c2c6483d0e4a7d01785f800fb35fe6fdd9b16906917b6421ea041affbca03bb4f533fe5b75c5ac4a83eceb067424a71939b2670a1355e3796639319160322795a8f07a3331ade8a212c7161c65dfe377c61bcc83b8cc515694c355807ca3b88167101362ec9f983380d15f18567e5cd0cedd2cdbafad460798cd8386763c0f720a80014f87345bb01bf2f1d1428f0f94d005ae8917caaf5601b1a423cfdd58c57194ab109099baf6682292737a15fdd07125230a5098db67b0d23920e4b6ad95679037a888699c3391c0bf225c85c13ad61ed55ca33f1cfb156be539eb76a13360eff1c9ecae0d8eb782efe4a3dcf9fb8e14cc414f8497e600fea6545a514cda4a59d6c9caf819dd1530d74d6795b69d27bd56d158dfc1d0795729d850c778b533fce8315ba12c5138f9aba5a7cd57e78f010ecc24e13c84f1e4a10382edf11c6a9fb8c3259db777b2d469ce1b04202433de04b481fa20c509a20dbbfe2c9b3d17e41cb1cef9a557034ffc2ef1e43c01ae532d86876065678abe0c0d2773bf13e1676ebd10726f9fa7333b1c4a37cd2d96755068d2825274ebc2802e7127914675e52a0087f6761079ae45d588f810c553cf6f21a968d571762369b0ed398a769ec8e57e57dce12f5bd91dc8767879ee044061f97c8b3fb9d122d520b43dfe65462d37c7044f875373e697531c230de8f9a6612f8476e2255b80dcdea731d9ad5921175c11800c9e06c6f6ba20943819d7e3ba25fe56103817d8ca050ae2062536bb164b9211687300a25b6903e3ddeb834d0c8e2f4ec6f279497caad25674b8f76eb2889357542b70113da7732968f50353f9e565967602702f65a9d3d83af2fa8c0b02feff0ba91499b1b10be51a74fe80fabe3d231b9f6b1e4fa8df2da93145acae935c33aae94465b48031ce8cf8d648717202f3fbc5c8e8d49b4e61dd662e10a88206cb34653bf1eee60e649f57623268d2ccd94d1ad3df2ec289417977e567325bc131ac5642c53bc03f4a1a4953cba4851bade479fcdf5f93f485fa846e159ff93dc84b5bbcd2f427afc3c2ce6af4a64f81a3a58905181a673064e87f7d94c701c94f6d4a57ee0456f4a5024ac28c3b67e4ece7cd604ff7db70de399fba1f8c329f9a99a208d6fb269adc2cdc440c07c98abf1c7ddee5ec36efa5174edb7516e92c2ccd7e75692e2087cc4202cdc3aff21d2b3d552a166587f8b003b34eda1db4dd7f639b43477cdd4f9a7562a0416d63d2b0df74f04e621278749a4e61d6c2465f6974549906b3e766271528325468d38488b8acddf569477e32eae7988f1b971fca6baeaa32b6ef9f7e96114422c53a7c37803e0739bded12a9a1b74b8ee437dc6230405acffe10a6b54327cb12fdb9bc269927145ec26333ee6dfbb0b278b4f78b3d9bbd27fba9dbb1b390f9ce7e628b803d272e3cf1755f410a38b384f52e4607b41f275afda35f513a3c4eecc6606a9ec0e37dc19ef1907f1b9103a7fa8344d60c43968e087e53eabc3de02c1908bddf547ad4edf7bf54893162f97bd31c09020280547648f869ed9e10f53c94ab601e5218ff5237d5525169ab23d51fb17229b9442c10d0962c20d9eb96f8f01c1afdb78b641d5c87bf55bfbc1dc69cff753b33d0275ba765f656601d9b7e54e185166bfd9e05b1964dead00c86f4dcfc3ad8b438be0b9cec60d727ee3b8264712d95ccebde1fec8ac7da61809d5f25b42977d0a4c7b8fab9d22d1e9048364d215ae8019b6e9a68cd4e5ff698c479b649fd671fed9cd8ef0421c0e7344422348bb8f341067481c34a0ba927d1a1a240853dbfe579291d230fe9fea87c7b2c67b207931287fe561d76e4d8d92fa3713887a216f503a8b981ce4baac86f5cb82d162139400912f6120cf44e7f2a43701546c1092b014dd905a77327579c57afcb54cfbe9b17987edd896d426d1bb5cc4e5dfadd68aa0703b92c8a649c3c275f4d04ae69e7298413ec416455c083fb233b9fb6a4afc0526f33f753dc21f3c8258027be81a902c61382871b0d953b92b257811e5294d156cc3639628fedadc036f6fa17782dde5f2393959c749a76b8593741f0912110234aed2c154d3d11c1fab30874f8fcc0e329cb732e6c7b80671a7c9c8adf3c9aa22281cef4638828ed3d5d3ad2b603edd306105d371cb87fc35fc954461491fb392b7152b891ba6c0466ecccbcbdfdfcb2d70a35b98bb5e40b6f54342437e36d57fc76c43c37f09432913af4ae4b3e19627b1cb5bca9a67921d57d24915ec4fd211e9ffdcea7df78f8c1e290c70e20594e4f5e64e88d500b214cde015c73ddb27296122cdaa78eabf87c2cb8fcbbb0d66ba5f549aba5f5afd421e291dababd8da78c92302c2093a0a0142bf96f0b2f74ae5a2e8870953f2b6f9b419929b1020d791f0bfc74a92e9a78276db79f607b94339ea1988adc3b1182eff87913d0bc49ff2fb9bfc67650217fb875523fb81c952d8fc29c71d5095ad86efa2833a8d9241c9a9fc1c99e8a16fecc0bf1b2e6ccdaa053b8cfa9c4601f2dca29881386eeb1f97fe281345efaf3f237d0e6ea12f0600b15a6493d2a1257cb2a2b16449d52b5a5bd90dc62d82bfe2a4880bf2c25c34207b0c9b51422c0c51de8db285bce28dae2418f4e8693ddeaab66512617e265398ee458ab96f689712b49471050bc875966714f38539109db27990ed5947f0bcc18800cf705a3c7222d30f3decfe1cf698fed6440e464155268014803cb2ab3d073c989968eab5ad710c55afcf29a1c6d5db401a1afc83196cb3af00147b4d8aa8c5698794ed1c4d456b6855894f80a7297fcbb2bfd27085270dfe496e30afa306ddb611e1586fa5b44ab482c06df887ef461872678a3c8c1806886a8b9ecbbaf47af21aadf6eca1cc9564d1a4457c823a6d68d1b5f9762304614b4410041653de58d058ef5ced5b34d3989d1881b2323bae841cb866a3be4427e32a00f415e45ef7120bf48ee58830896e50b8e58b06574998fbe18ac5bbdf27b23bdde5fabfbd1029eb65b3f13a14a64baa74ab9dd9e64f047014d51628de8080603ce4ea94a3070a708c40975054a8bcd231d77dc63b88f54493ef64809c368259219fdfb31e49ca320ea9add3727d535e9629017e4ef13b7584e5e144398f36621fb22e35aacac18fa2f0fd352e3a93c4c8515774b309e836310cd8dbd40836f721445de76189d3656c1e2d6ec845361bf419088a1cd001b9d4ea937aa6f7094b727265426c922e9f7bba7cf385cc1f1b069cbfa34be539b9653fdf94244371dec8acfebfbb2586f17e78aa8e5104e8dd811bc9b545d9f4cdbf545e0456bc28bb99994a050b38d84c3909fb514534c967658e8757ad08f32ea4dc2f5575f049897f25b3360c92d59397288bb79781c033734cd11a56bb383d315462305d92b4ba4ba4b29e8b41b39743b6fa92db8031e5a9121044ef7c14d09d0e0079f4dcb3af958e0b9e4147234787bffcb65e2ae80716042c8ed8363eb29c4c88578ad790b5dcbd7c9a6d937bf5e4ec7df3f8ce013b6de827c59cbfbe47c8b38eb0aebf28ec0bb90e18fcb4d958916e7ffaafe34522f63d3bf5e538cde2abad7453efdcc673cea05610c6b56969a389980587fba6d97413383a1eacac499cfed4e9a634cc349753266768b46ccda6828c25ff8c98fa2e4953283f86d745c4effed19c504d560d30becf93fcebd5252ff9134f0b3ee82991203a4b23aa3fd676951357ce9e550530487cd29f23a025917efcead9c2eecffba7eda375648b8d0e4c8f19e3c6d0388a9faf72271328991eaf9703f52fcd3bfed7ed4d0f5d6cfee6743fb9beab32dabff66f3c0188085f82973003622d6c94219562e7da4205d14c7bdbdd1165c6ed11c3ea9e0121a3668d869cfdd68104617a9662e971048fcafa155b73792e3d20577ccbcca72f4a875f03e2586b9259c4897f49a1f2f96c48f5ee1b30313d67c2d6f1593fb06adc8b5981e6d0423a5d9dd01ea501022aed4f84ced194bd5dc68ba349e304e03b4f3a9a3403233af99486efc7da7151eb9eda7f5d602d3684b93f8b30b5b112ec4464f15dc717d26c427015badaa095b5c0c0b8aaa00a5956b15a8fd38dcc7ac326fa536a1be077e9a5f1c5d494610c5889df0525a33f5b"]}, 0x1010}], 0x1, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}], 0x20, 0xc010}, 0x20004800) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001300), &(0x7f0000001340)=0x14) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002b80)=""/157, 0x9d}, {&(0x7f0000002c40)=""/114, 0x72}, {&(0x7f0000002cc0)=""/153, 0x99}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006940)=""/58, 0x3a}}], 0x7, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x6, 0x2, 0x6, "11bbd7775c777b7045ef0d4763d24489d48b8efc297823c0dd3519afb36b407901641a70a66d364ce759329e88288e6df0cfee463d1a7658bc266d0e18442a", 0x21}, 0x60) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x1) 21:20:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [], r2, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x7) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44f1ff0010fa010400000000000000001000000018a7c14406cd396d21ca71eab97a5b755d", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 21:20:24 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f00000044c0)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/141, 0x8d}, {&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000001340)=""/193, 0xc1}], 0x5, &(0x7f00000014c0)=""/128, 0x80}, 0x7fffffff}, {{&(0x7f0000001540)=@rc, 0x80, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/38, 0x26}, {&(0x7f0000001600)=""/55, 0x37}, {&(0x7f0000001640)=""/31, 0x1f}, {&(0x7f0000001680)=""/138, 0x8a}], 0x4, &(0x7f0000001780)=""/77, 0x4d}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)=""/113, 0x71}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001940)=""/95, 0x5f}, {&(0x7f00000019c0)=""/52, 0x34}, {&(0x7f0000001a00)=""/223, 0xdf}], 0x5, &(0x7f0000001b80)=""/161, 0xa1}}, {{&(0x7f0000001c40)=@x25, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/1, 0x1}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/71, 0x47}], 0x3, &(0x7f0000001e00)=""/252, 0xfc}, 0x2}, {{&(0x7f0000001f00)=@generic, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001d00)=""/50, 0x32}, {&(0x7f0000001fc0)=""/202, 0xca}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x3}, 0xc}, {{&(0x7f0000003100)=@nfc, 0x80, &(0x7f0000004400)=[{&(0x7f0000003180)=""/71, 0x47}, {&(0x7f0000003200)=""/178, 0xb2}, {&(0x7f00000032c0)=""/164, 0xa4}, {&(0x7f0000003380)=""/70, 0x46}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x5, &(0x7f0000004480)=""/48, 0x30}, 0x7}], 0x6, 0x140, &(0x7f0000004640)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x1}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) recvmsg$can_bcm(r0, &(0x7f0000004e80)={&(0x7f0000004680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000001f80)=""/40, 0x28}, {&(0x7f0000004700)=""/227, 0xe3}, {&(0x7f0000004800)=""/26, 0x1a}, {&(0x7f0000004840)=""/211, 0xd3}, {&(0x7f0000004940)=""/68, 0x44}, {&(0x7f00000049c0)=""/17, 0x11}, {&(0x7f0000004a00)=""/197, 0xc5}, {&(0x7f0000004b00)=""/253, 0xfd}, {&(0x7f0000004c00)=""/48, 0x30}, {&(0x7f0000004c40)=""/156, 0x9c}], 0xa, &(0x7f0000004dc0)=""/162, 0xa2}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000004f80)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)=@gettclass={0x24, 0x2a, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xb}, {0x6, 0x5}, {0x1, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x800) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r7, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18b8c001", @ANYRES16, @ANYBLOB="000329bd7000fcdbdfd99a3bac00050001000000000008000400ffffffff14000600000051e0b2fd1a502678c507022b0e75954aded3ceec732fe631509aa0f73833c928fa62dd8a34011c89698bc8b6bf810858e43a02e0d1e8bcb30d78f37078d125f1974e5876656a94888b35880afcadfad34d944efa9ebbc9fde0bc0cb6042b27b2f61e0887a44710ba9fa80a765a1c9d28ccf7482cab86bb5557bc90d2971ea63c7c9e6636ec0cf942d376802c0969d5652ddd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005080)={&(0x7f0000005000)={0x70, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3e}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4004804) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000001) [ 1363.745180][T25121] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1363.816068][T25127] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 21:20:24 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) [ 1363.845294][ T27] audit: type=1804 audit(1598995224.825:1314): pid=25126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/854/cgroup.controllers" dev="sda1" ino=16226 res=1 errno=0 21:20:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x5, 0x5, 0x209e20, 0x2, 0x1}, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1c1}, {0x6, 0x11, 0x68}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xdaa5}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) [ 1364.088677][T25134] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1364.118332][T25171] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.0'. 21:20:25 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0xa, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYRES64], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000540)={0x32, 0x10, 0x0, 0x5, 0x0, [@remote, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={[], [], @rand_addr=0x64010101}, @mcast1, @private2={0xfc, 0x2, [], 0x1}, @empty]}, 0x88) getsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f00000049c0), &(0x7f0000004a00)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002c00270d00000000000000000000000052fcd7d1b5ce0c8cedb01e766d97000d0501b433f983ac87503735173eebb1ed1b4a649bd55891af250c1d0960b2dcce970a6adbb6f5002bbd0c09ac4ae277de2d15a631468d2c415587772ffe92479ae3afa52421706085e42a9bb12558a6aa7fd36e2fe30a7be108875a8ab83f2d577405728ab4477d6d12c35d8970b3930d3054770dc7ee07db6f855beac8e45910cc787f2b3a992cfd3f47107d451d6884261e1f6f65750a3144ed67feba495d3272e17bf80f9b8e3ab2baba2e3b2082d0114e6f8d9ff62ad183d24bca", @ANYRES32=r3, @ANYBLOB="00000000050000009bd31a2a0017b7313dc074e26312cfe73b0c40d317e1b11e2625927424e1db29f77546f8a0e5ff429cf282435d5f52da9b078eabd0156984bbaec2a6816b116d"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x84, 0x10, 0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000300)) [ 1364.140830][T25179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:25 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000300)=@full={0xb, @remote, @remote, 0x0, [@netrom, @remote, @rose, @default, @rose, @default]}, &(0x7f0000000340)=0x40, 0x800) r8 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) r10 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r10, 0x84, 0x10, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80001}, 0xc, &(0x7f0000000040)=[{&(0x7f00000001c0)={0xfc, 0x41, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xea, 0x6c, 0x0, 0x0, @binary="e9ce8c8ea0461ecbffd150600737d71243852b8a3af116dd95f82be3191b7c89343cb3d51fb7b5947d0378abe5df1e05d9ca1add685664d6098c9b185cf499945266f7726bf89139685b701601b87e8a33d17ff5ed3b51cc766e74096b5a26e47e456ccba2472b02845b5ff6f2b06407ab0d9562787001953500ad13a64a637227614d60c09fcd231d59f05e3882a7fe7f26e76b2cf6653dca6e8a43f16dac09d18c5e51cf57ffa8a4d40a92cc531f2810af92a984a39c9ac4efaa34fc5a8da2cc01e80a27e781a6b5d10b0deb0773751960a7a27cf827048a9f92479be4cbb6e5eba38a40b0"}]}, 0xfc}], 0x1, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, r4, r0, r5, r6, r0, r7]}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x128, 0xc0040c0}, 0x4c050) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 21:20:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, 0x0, 0x0) [ 1364.232667][T25184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:25 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000001c0)={0x3ff, 0x2, 0x80000000, 0x3ff, 0x8, 0x100}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0xa, 0x800, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r3, 0x40049409, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r2, 0x0, 0x100000001) [ 1364.489036][T25200] IPVS: ftp: loaded support on port[0] = 21 [ 1364.548914][ T27] audit: type=1804 audit(1598995225.525:1315): pid=25201 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1546/cgroup.controllers" dev="sda1" ino=16024 res=1 errno=0 [ 1364.570823][T25200] lo speed is unknown, defaulting to 1000 21:20:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:27 executing program 1: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000080)={'vlan0\x00', @ifru_data=&(0x7f0000000000)="ae462381b7614c10d867f675320700814fbbc6ae92aeb77b2ad9774930f0a11a"}) r1 = accept$inet6(r0, &(0x7f00000047c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000004800)=0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000004840), &(0x7f0000004880)=0x4) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)}, {&(0x7f0000000140)=""/193, 0xc1}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/32, 0x20}], 0x4, &(0x7f0000000340)=""/46, 0x2e}, 0x1ff}, {{&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/226, 0xe2}], 0x1, &(0x7f0000000540)=""/48, 0x30}, 0xf243}, {{&(0x7f0000000580)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/11, 0xb}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000000a00)=""/247, 0xf7}, {&(0x7f0000000b00)=""/66, 0x42}, {&(0x7f0000000b80)=""/152, 0x98}], 0x8, &(0x7f0000000cc0)=""/227, 0xe3}}, {{&(0x7f0000000dc0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/98, 0x62}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/192, 0xc0}, {&(0x7f0000000fc0)=""/93, 0x5d}, {&(0x7f0000001040)=""/173, 0xad}, {&(0x7f0000001100)=""/161, 0xa1}, {&(0x7f00000011c0)=""/11, 0xb}, {&(0x7f0000001200)=""/154, 0x9a}, {&(0x7f00000012c0)=""/15, 0xf}], 0x9, &(0x7f00000013c0)=""/53, 0x35}, 0x8}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/74, 0x4a}, {&(0x7f0000001480)=""/117, 0x75}, {&(0x7f0000001500)=""/225, 0xe1}], 0x3, &(0x7f0000001640)=""/137, 0x89}, 0x5}, {{&(0x7f0000001700)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)=""/132, 0x84}, {&(0x7f0000001840)=""/134, 0x86}], 0x2, &(0x7f0000001940)=""/177, 0xb1}, 0x1}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/2, 0x2}], 0x1}, 0x5}, {{&(0x7f0000001b00)=@phonet, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/141, 0x8d}], 0x1, &(0x7f0000001c80)=""/150, 0x96}}], 0x8, 0x16de8c6866640d10, &(0x7f0000001f80)={r2, r3+60000000}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002040)={0x120, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc4b3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @empty}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x75f}]}, 0x120}}, 0x800) 21:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 21:20:27 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4184630c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '[\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044015}, 0x40080c0) close(r1) bind$unix(r2, &(0x7f000094cff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmmsg$unix(r2, &(0x7f0000004a80)=[{&(0x7f0000001f40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000bc00"], 0x18}], 0x1, 0x0) 21:20:27 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) unshare(0x60000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x140d, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x42) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4804}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_IFALIASn={0x4}]}, 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f0000003a40)=ANY=[@ANYBLOB="720208009e3f2ff2900fe55408d8a33438ad303895050b362feee6babf4e870d16f7eb9eccd741b4847942a425b7227201d99a7f00daea010e3e7c3b6baf5e5bd37ef40c798368fabca5ffffffff000000002a0cb2998b5c691479b01958c3eaa6d36af39f83ea63ec502bee35bb49343d0744757c3986ae44c37bac55ca37e4aeccfd3ec9c8a8ab01346a05927580baf4b3e9f765603f851e8df4fcac2f1d2997da40fd858dd101228c6a3317bda9311cd2f66b5fe1fb1044040631b2de3946abea8c1c699fa491dc7d829ebabf8de376ad3771c39bf76ba2ae273dbbe87b3609e4b900", @ANYRES16=r6, @ANYRES32=0x0], 0x770}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x28}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x81) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}]}}]}, 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc5e0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3e48}]}, 0x64}}, 0x4) [ 1366.294200][ T114] tipc: TX() has been purged, node left! [ 1366.303298][ T114] tipc: TX() has been purged, node left! [ 1366.464391][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1366.476715][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1366.486897][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1366.497910][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 21:20:27 executing program 5: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x14000005) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "307453185f7bbd3671ded9e2897a029e"}, @sack_perm={0x4, 0x2}, @mptcp=@generic={0x0, 0xe, "de40d258c78dd1f0f6951a68"}, @generic={0x0, 0x9, "72310fbe75f2e5"}, @md5sig={0x13, 0x12, "b3f0a6cdc09008a9007ab10c680a8fb7"}, @mptcp=@synack={0x1e, 0x10}, @mss={0x2, 0x4}]}}}}}}}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x40, 0x4, 0xf7f, 0x4, 0x9, 0x2, 0x6}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x1, 0x8, 0xf03, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20000804) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="08000000000000000000000000040055651161edbc421000"]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 1366.510102][ T27] audit: type=1804 audit(1598995227.485:1316): pid=25259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1547/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 1366.516759][T25248] IPVS: ftp: loaded support on port[0] = 21 [ 1366.545547][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1366.593860][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1366.627647][T25267] IPVS: ftp: loaded support on port[0] = 21 [ 1366.651675][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1366.688787][T25253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:20:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 1366.798157][T25254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1366.873386][T25261] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1366.944488][T25267] lo speed is unknown, defaulting to 1000 [ 1366.959423][T25248] lo speed is unknown, defaulting to 1000 [ 1366.996667][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1367.025616][T25287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1367.044335][T25287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1367.080365][T25287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1367.106898][T25287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:20:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0) r4 = socket(0x9, 0x6, 0x7) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x2, 0x0, @fixed}, 0xe) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40c40d5) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x705, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x0, 0x4400}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_ADDRESS={0xa, 0x1, @dev={[], 0x1d}}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x3f00, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 1367.256648][T25299] IPVS: ftp: loaded support on port[0] = 21 [ 1367.256743][T25264] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:20:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0xfffffffffffffcb6) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000000c0)=""/4107, &(0x7f0000000040)=0x100b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 21:20:28 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x800, 0x200, 0xf1, 0x3c, 0x0, 0x80007, 0x8}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x7, &(0x7f0000000000)=@raw=[@exit, @exit, @generic={0x3f, 0x7, 0x1, 0xe8, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x100b, &(0x7f0000000680)=""/4107, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$nbd(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) [ 1367.517199][T25327] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1367.548773][T25267] IPVS: ftp: loaded support on port[0] = 21 [ 1367.608437][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1367.655020][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1367.690616][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1367.719069][ T27] audit: type=1804 audit(1598995228.695:1317): pid=25343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/857/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1367.747462][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1367.897804][T25267] lo speed is unknown, defaulting to 1000 [ 1367.908893][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1367.930875][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1367.980006][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 21:20:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40001, 0x1, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=0x400, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r0, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000)="4fa9461840761a0b74b59fe36bff66a0bf2a4bc81b831133209ed5e9374d1142844ed15ad2c6a3bd0e6b0c721e4d04ba0131222e8d5fd81acb29f7f9c3ce9f1fe65bf163966646ef348d114c6c847ff24bbfe630d9dc9a352b7989e9d9b5dde523c64619a81fb3fe2dc07a1d4dc173bd8846f40d41e56ecc16a96a7f11db5582084275d2ee66728d6e154143c422ce18329933bf9b87a466f7cddea46d6daf5694b187b3a93438d7bab60856915df7122a6b0e71ea", &(0x7f0000000140)=""/78}, 0x20) [ 1368.031718][T25335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:20:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:31 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x4) 21:20:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x228202, 0x0) close(r1) unshare(0x40000000) r2 = socket(0xa, 0x5, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x4bc, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x4c}, 0x7c, 0x20, 0x9, 0x918e, 0x16, 'syz1\x00', "a51f453ed062c9288eb699a949e020cb41a34af4d7a8e979ab6d288b5d0ff1e0", "20ab45ad5eb6a2c4bc2e5146a648401a609a493b2d14e14107ae118fe9dcae1d", [{0x8, 0x1, {0x2, 0x80000000}}, {0x2, 0x0, {0x1, 0x3}}, {0x7, 0xffff, {0x3, 0xffff}}, {0x20, 0x1, {0x1, 0x1}}, {0x9, 0x74d2, {0x3, 0x6}}, {0x2, 0x5, {0x0, 0x101}}, {0xffff, 0x46, {0x3, 0x6}}, {0x3ff, 0x71de}, {0x46ab, 0x0, {0x1, 0x5}}, {0x40, 0x3f, {0x2, 0x20f7}}, {0x3, 0x81, {0x1, 0x7}}, {0x3, 0x20, {0x0, 0x20}}, {0xffce, 0xffff, {0x3, 0x7}}, {0x9, 0x1, {0x3, 0xffffffe1}}, {0x4, 0x1000, {0x2, 0x9}}, {0x800, 0xd7f, {0x1, 0x1ffe000}}, {0x0, 0x3, {0x0, 0x44}}, {0x81, 0x7f, {0x3, 0x101}}, {0x8, 0x1000, {0x2, 0x9}}, {0x6, 0x8000, {0x1, 0x7}}, {0x200, 0xe3, {0x3}}, {0x0, 0x4, {0x0, 0xffffeb02}}, {0x0, 0x974, {0x3, 0xd12e}}, {0x4, 0x5, {0x3, 0x5}}, {0x5, 0x1000, {0x2, 0x7}}, {0x5, 0x4, {0x1, 0xfffffff9}}, {0x89, 0x3, {0x1, 0x2}}, {0x1, 0x8001, {0x2, 0xbbd9}}, {0x9, 0x40, {0x0, 0x9}}, {0x921, 0x2, {0x2}}, {0x6, 0x101, {0x0, 0xfff}}, {0x8, 0x80, {0x2}}, {0x100, 0x0, {0x1, 0x6}}, {0x5, 0x0, {0x2, 0xfffffffb}}, {0xf5, 0x7}, {0xc088, 0x38cc, {0x3, 0x7f}}, {0x5, 0xfff, {0x1, 0xabd6}}, {0x5, 0x3197, {0x1, 0x7c1d214d}}, {0x6, 0x1ff, {0x2, 0x3e4d86fe}}, {0x1, 0xff, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x8, 0x4, 0x8, 0x19, 'syz1\x00', "419b01430483b5d43d214e1b360ee8bcae327c353c06393ba4bf47ceda270811", "eedf190aec9f47edc50c9bd135bbb235c4c11c56be220b443bf81875807fd2c2", [{0x8000, 0x3, {0x0, 0x4}}, {0x7, 0x1, {0x1, 0xffffff80}}, {0x0, 0x2, {0x0, 0xaac0}}, {0x4, 0x4, {0x1, 0x82}}, {0x1, 0xd86, {0x1, 0xffffffff}}, {0x1ff, 0x6, {0x2, 0xfffffffb}}, {0x9, 0x1c4, {0x2, 0x5}}, {0x2, 0xa43, {0x2, 0x2}}, {0xa70, 0x4, {0x0, 0x9}}, {0xefd, 0x6}, {0x4, 0x9e, {0x3, 0x9f}}, {0x0, 0x8000, {0x3, 0xffff}}, {0x5, 0x42, {0x3, 0xffff0001}}, {0x200, 0x8, {0x1, 0x8}}, {0xe740, 0x0, {0x1, 0x3}}, {0x2, 0x1, {0x1, 0x6}}, {0x0, 0x2, {0x2, 0x3}}, {0x100, 0x9, {0x2, 0x4}}, {0x3, 0x5, {0x0, 0x1}}, {0x800, 0x401, {0x2, 0x400}}, {0x1, 0x3, {0x1, 0x7fffffff}}, {0x0, 0xfff, {0x2, 0x3}}, {0x20, 0x8, {0x0, 0x5}}, {0x1f, 0x3, {0x1, 0x2}}, {0x2, 0x9, {0x1}}, {0x3, 0x8, {0x0, 0x4}}, {0x2, 0x0, {0x0, 0x6}}, {0x3f, 0x5, {0x0, 0xffffffe0}}, {0x401, 0x2af6, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x6}}, {0x5, 0x6, {0x1, 0x6}}, {0x3, 0xfff7, {0x1, 0x3}}, {0x0, 0x0, {0x2, 0x8}}, {0x0, 0x6, {0x0, 0x7f}}, {0x7f, 0x836d, {0x1, 0x2}}, {0xbb1, 0x7f, {0x3, 0x7}}, {0x3ff, 0x2, {0x0, 0x4}}, {0x8000, 0x7f, {0x3, 0x800}}, {0xd7, 0x1000, {0x0, 0x6}}, {0x6, 0xfffb, {0x3, 0x40}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @broadcast}}) 21:20:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000009000)=r0, 0x4) [ 1370.720635][T25393] IPVS: ftp: loaded support on port[0] = 21 [ 1370.813267][T25393] lo speed is unknown, defaulting to 1000 [ 1371.300424][T25397] IPVS: ftp: loaded support on port[0] = 21 [ 1371.376599][T25397] lo speed is unknown, defaulting to 1000 21:20:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee08aa49", @ANYRES16=r1, @ANYBLOB="040026bd7000fcdbdf250800000008000400ac1414aa2400070073797374656d5f753a6f626a6563745f723a7373685f657865635f743a733000"], 0x40}, 0x1, 0x0, 0x0, 0x8048094}, 0x8805) r2 = accept(r0, &(0x7f00000001c0)=@alg, &(0x7f0000000140)=0x80) r3 = accept$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x36}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf967}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc62442ab070753ed}, 0x8045) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', r4, 0x80, 0x700, 0x7fff, 0xfff, {{0x1e, 0x4, 0x3, 0x8, 0x78, 0x66, 0x0, 0x12, 0x2f, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x1c, 0x8f, 0x0, 0x9, [0x22, 0x3, 0x1, 0x0, 0x80, 0x1]}, @generic={0x89, 0x2}, @rr={0x7, 0xf, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100]}, @ssrr={0x89, 0x2b, 0xba, [@empty, @multicast1, @private=0xa010100, @private=0xa010100, @remote, @local, @multicast2, @empty, @rand_addr=0x64010100, @multicast1]}, @timestamp={0x44, 0x8, 0x1f, 0x0, 0x1, [0x4da]}, @noop]}}}}}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="52000000933f7a3b8ac6fce69281084b8fb4f6d93b9bda991eb629830ebd31eb27ea388d21b1510433b7d94d774576cbd8909c47575f181b78ac38cd412889e93645d4c856c3c17643910080ea5f9aac8d8c2f20732db50e9edb91f4091783e522f87929f2d2d6a15a89826614fd7d4a33fdd6876211a96e3caa15c06fb381dcc8cb447b8d01bcf11c4aa7925b145c95acf590e683ea503d7cb22b78996535f5f379ca5ff0cf0de105a33dde6c012e6e4d82ff9f22afd32566b0f66fd6539c3f5185054af8e73648d0", @ANYRES16=r1, @ANYBLOB="000126bd7000fbdbdf250600000014000200ff02000000000000000000000000000105000100000000001400060076657468315f746f5f6873720000000005000100000000000800050064010102"], 0x54}}, 0x0) unshare(0x5f048880) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@local}, @typed={0xf, 0x1d, 0x0, 0x0, @str='}}-\xd6]{&$!\x8f\x00'}]}, 0x34}, 0x1, 0xffffff7f0e000000}, 0x84) r7 = getgid() r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = openat$cgroup_int(r0, &(0x7f0000001c80)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r10 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r10, 0x84, 0x10, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000740)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000000780)={0x18, 0x25, 0x4, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x8, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08001b00", @ANYRES32, @ANYBLOB="5d790b3fa48deebe3100000014003a00fc0000000000000000000000000000010000"], 0x1ec}, {&(0x7f0000000a40)={0x3d8, 0x12, 0x300, 0x70bd2c, 0x25dfdbff, "", [@typed={0x14, 0x66, 0x0, 0x0, @ipv6=@private0}, @generic="0dca283a24bd7f816b89b03386ed2377ee85fe688c6acd9ff2bac1a261d8bd94fdce6550e86c7e6f495be562a8be09a9b2e7eae43eb966d92b43a2481df700c32b4ffca9b77b2b94448bc1f8696805422094d3a3c5e9e35c234c4c54e67629c5184505ac6e208dc0df423e4d16c83789574721ee5ad08454d91cc7ff1a813da4", @nested={0xc7, 0x8a, 0x0, 0x1, [@generic="6a1feaac9ed84a85ef73fba8aa30dabcd33e07e68a7a956240c2a70a0a2688e8348a77de5b5bec62164be647136d13f8ec04403370d8337dc29dfe2bd63677a88adebee44e2b6d2f7578a596d107a01793a5dac2e2d2fa56bb13", @generic="71d8c47881b5e76bade2741ddbab6ed9da7d47db3b37db9f4f9047564bacfb83694a05bef96e1e157bb0e12e69df5c01bf721073259e87016c9ceed2bf8ed131abb1d33eb72f898be5bcc610d579a041b652a273525c79c6c0ddcfd272ec706c1e", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0x39, 0x0, 0x0, @fd}, @nested={0x25e, 0xd, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0x7ff}, @typed={0x8, 0x8d, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xe8, 0x7, 0x0, 0x0, @binary="5adf1a96786f30af8c2298e582d3a342d97c9f78b1e4a3f3a6f98221b4a4f189330aa4f1e1d38b78c8d7392189471baa2e147e14f240af22bd20fdef39d66559894dae271165b0ec17c6f683b42c0e3825b5a1a694d95bc80da1ed64848ac5e7ae32d612adfc4fb61f5ea9c07cb62949219111f830fce438ca0b6c0269e706863b67f8bb9b2ef7f2d4fca4950113f89b0af1a9c80a9554af55157270a217db73ce1186a73d376388168c29229a9231614982ed7af4ba7941624f94cf00b19ef482db77a52d520a246e2fe23a94143dfc65c8cfa3cc5d2afc9f979863237e699143022b82"}, @generic="39990f2b9bd1f03e6cccc9be850ca42546c1d774e5288b73801ac7268f4cc766326b19fcfc953d1cc4689d5fc8e26ba441101d0fc8e755c4d09c58bb26d4896563c836355fa5ff6198c01d03c8795d8217bd81f5d542e79d1ef904058a391efa27b14ecce06d6e7912328d9ebac09a19e7c33ccdaf", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@mcast1}, @generic="553663a2c37f465ccba2ca27fc77dbb235714bc14f1a68222f26c7f35ca229bced527f3d8221d9209f0c184f2bcf212ab3b1e786ead8304714eb80606652d540fd60920a298bf121cf526b6211ae34cfb1ad8b6ab8e2379be400c1a9da4fa45e6dd342e778e4c32303afac49fcae64658b6db74b113931f8332d09dca728659d1fa681cb991f97ee3740c358a7090bcfd97ce8e520e02d08383eaff92c00f502132b8301e81bafbe25b08ebd9ba8bc1b66f67ff6963e5a4ffebf5415d3ea4e1306b6cebb59782032977cf4a84c", @typed={0x8, 0x8f, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="82f61869"]}, 0x3d8}, {&(0x7f0000001bc0)={0x14, 0x2c, 0x0, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0x52}]}, 0x14}], 0x4, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, r9, r2, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x60, 0x4000010}, 0x4880) unshare(0x1c000280) 21:20:32 executing program 2: r0 = socket(0xa, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b70803000000b040f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 21:20:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vlan1\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x807, 0x6}) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r2, 0x5451) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x1, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, [], 0x33}, 0x2}, {0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e24, 0xfffffffc, @local, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x9, 0x3, 0x8, 0x0, 0x1, 0xfffffffc, 0x8000000]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, 0x0, 0x0) 21:20:32 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x3b}, 0x7}}, 0x55c4, 0x7ff}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) [ 1372.011758][T25456] IPVS: ftp: loaded support on port[0] = 21 [ 1372.124152][ T27] audit: type=1804 audit(1598995233.105:1318): pid=25461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1548/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 21:20:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x9465}) socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x80200001) r2 = socket(0xa, 0x5, 0x81) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) [ 1372.372541][ T27] audit: type=1804 audit(1598995233.355:1319): pid=25465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1548/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 21:20:33 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000440)=0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendfile(r2, r1, 0x0, 0x100000001) [ 1372.497317][ T27] audit: type=1804 audit(1598995233.395:1320): pid=25461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1548/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 21:20:33 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x3b}, 0x7}}, 0x55c4, 0x7ff}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) [ 1372.676003][ T27] audit: type=1804 audit(1598995233.655:1321): pid=25486 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1549/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 [ 1372.718966][T25456] lo speed is unknown, defaulting to 1000 [ 1372.797188][T25459] IPVS: ftp: loaded support on port[0] = 21 [ 1372.947512][ T27] audit: type=1804 audit(1598995233.925:1322): pid=25513 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1221/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 21:20:34 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x3b}, 0x7}}, 0x55c4, 0x7ff}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) sendfile(r2, r1, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) [ 1373.377027][ T27] audit: type=1804 audit(1598995234.355:1323): pid=25487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1549/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 [ 1373.428911][ T114] tipc: TX() has been purged, node left! [ 1373.458694][ T114] tipc: TX() has been purged, node left! [ 1373.496380][ T114] tipc: TX() has been purged, node left! [ 1373.496452][ T27] audit: type=1804 audit(1598995234.475:1324): pid=25533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1378/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1373.534244][ T114] tipc: TX() has been purged, node left! [ 1373.555919][ T114] tipc: TX() has been purged, node left! 21:20:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@allocspi={0x100, 0x16, 0x311, 0x0, 0x0, {{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {@in=@private=0xa010101, 0x0, 0x6c}, @in6, {}, {0x0, 0x0, 0x10000}, {}, 0x0, 0x0, 0xa}}, [@replay_thresh={0x8, 0xb, 0x1}]}, 0x100}, 0x8, 0x0, 0x0, 0x4000000}, 0x0) 21:20:35 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x10850) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 21:20:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000240)=0xffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'dummy0\x00', {'geneve1\x00'}, 0x7}) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) write$cgroup_int(r4, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) 21:20:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x80000000000e, 0x4, 0x2000000000004, 0x830, 0x29e, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x40) 21:20:35 executing program 5: setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="07000023044150000100ff03060007000002797ebe03f30d492d2909d1822005c36ae6f33a3a6c195b6a63dada5a6f6a87d27ff9de9ee985ee"], 0x12) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r0, 0x3}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000045) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xb8a2, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x40) [ 1374.959224][ T27] audit: type=1804 audit(1598995235.935:1325): pid=25549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1550/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 1375.301820][ T27] audit: type=1804 audit(1598995236.285:1326): pid=25554 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1550/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 1375.401905][ T27] audit: type=1804 audit(1598995236.305:1327): pid=25549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1550/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 21:20:37 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r3 = socket(0x2a, 0x1, 0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000400)={r6, 0x5}, &(0x7f0000000440)=0x8) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x4, 0x2, {0xa, 0x4e24, 0x82, @private0, 0x1c0200e4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="6d33c49113b43db6136ff756d3e610ba2ec3c9408848e19b1f0fad0f1b1e22c4d292ca9e5931266d75ccd402f5c82410a47be0382db3430bd2e72a58965eee14ebac5aebfe81e50eab918fe8a2c33b72b300b58ad726a58320fdc7ddc3e697139442b8c76d8f4f47e0c9c4b484136c17615affe818d73cc6511193c23cbf2e2751fce5240768b44071203ef1d4a93f166bf81fb9228832d8a073632a0d8f467e9b94f12ce5d89dd8bc35c1ce78e39c7bc666ab8cb8d931da", 0xb8}], 0x1, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9e5e}}], 0x48}, 0x20000890) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$tipc(r0, &(0x7f0000000100)=@name, &(0x7f00000002c0)=0x10, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x20000040) 21:20:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000000000004) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007f00)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000008000)=0xe8) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x19, 0x80, 0x400000, 0x2e1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x40) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000082c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008280)={&(0x7f0000000480)=ANY=[@ANYBLOB="04020000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf251900000030000180080003000100000014000200766c616e30000000000000000000000008000300050000000800030001000000580001801400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="00000000880878ac99116bb9891bd4eea6ebda29172cb064aa07567588476cb8c01596c4b37a16dc24e6321d3d94b35b813f8951124d3427136608d2c4ae3c50", @ANYRES32=0x0, @ANYBLOB="14000200636169663000000000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200636169663000000000000000000000000800030001000000080003000200000030000180080003000100000008000100", @ANYBLOB="dc9a3755e468bed53d4bbf3bbe6df352d2fb24fe82a64a0c55f8a3ba7a0def3b040e9e03d7f7972de4c9663b7d447d19124e1f5cc77cc3104f7e116c3a5ab25703005886eea2cccea906cb54ff013aff3b57b4faf3517370257b95270aec19a4c5224512763f6f2c31acce9e3c0cbcc8d61b0df15e2983d99f8e77b7157126387ad85cf4ec9c84f872ffe19eef7287d8d37b70c759d73ffd665e97c247c4874f2701b9e639928197d6af6f47d13d67856be81b0e5b26b2b93b49c976d92c986d4ea7", @ANYBLOB="080003000000000014000200776731000000000000000000000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400f1ff73797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766972745f776966690008000300010000006400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES64, @ANYRES16, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESOCT], 0x204}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 21:20:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'geneve0\x00', @link_local}) r3 = accept4(r1, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80, 0x0) bind$x25(r3, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)={0x877, {{0xa, 0x4e22, 0x7ff, @empty, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x40, @local, 0x6}}, {{0xa, 0x4e24, 0x10000, @ipv4={[], [], @private=0xa010101}, 0x7fff}}]}, 0x190) 21:20:37 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x1a, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) sendfile(r2, r1, 0x0, 0x100000001) 21:20:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000240)=0xffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'dummy0\x00', {'geneve1\x00'}, 0x7}) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) write$cgroup_int(r4, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) 21:20:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$netrom(r1, &(0x7f0000000000)={{0x3, @null}, [@remote, @null, @remote, @rose, @default, @default, @remote, @default]}, &(0x7f00000002c0)=0x48, 0x0) getpeername$netrom(r3, &(0x7f0000000380)={{0x3, @bcast}, [@netrom, @netrom, @netrom, @null, @null, @null, @bcast]}, &(0x7f0000000300)=0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db, 0x304}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 1376.294187][T25584] IPVS: ftp: loaded support on port[0] = 21 [ 1376.307645][ T27] audit: type=1804 audit(1598995237.285:1328): pid=25580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1551/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 1376.385934][T25587] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.451513][T25587] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.502578][T25587] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.550003][T25587] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.606301][T25587] device geneve3 entered promiscuous mode [ 1376.648449][T25584] lo speed is unknown, defaulting to 1000 [ 1376.659035][ T27] audit: type=1804 audit(1598995237.635:1329): pid=25586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1551/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 1376.883727][ T27] audit: type=1804 audit(1598995237.635:1330): pid=25580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1551/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 [ 1377.230653][T25584] device geneve0 entered promiscuous mode [ 1377.279003][T25584] IPVS: ftp: loaded support on port[0] = 21 [ 1377.321868][T25584] lo speed is unknown, defaulting to 1000 21:20:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:39 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010200000000000000000000000004000480090002000200000000000000091c010073797a30000000000800034000000001ffc58b11542f997164192c9b81ac3462c534cdf656037cb010d387ba19036af2d0f5ab6ed0ef09348b6aacae9aaa8d1f5122a2905a3f6fd64cd6400cc1f7a74c2e2b1c85cc0599827d316a12c092bceafe96b98240b43fbffc6e4c4bc1aafba168971846d588813d6d8b626a0a7331ea941dd74f09021a96787bd4d212e59901dd", @ANYRESOCT], 0x1}}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 21:20:39 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x1a, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) sendfile(r2, r1, 0x0, 0x100000001) 21:20:39 executing program 2: unshare(0x40000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x5) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), 0x4) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000009c0b7ccf2d7d05351bc6bb31b38f149d95f34fd492463bfe7e63a221309a28eeebbfce12a16169cb956e11fa7aab8b8fd1ac87337aedc18485ab6b570e673cf83cbf5ca5fcae6e0af5de3978e8ed9dae63be3a8e839c033fd7d1d0be762b221aa4a9f01f43d7a2ff0103c0f545232cb1ebad410ecd69000a0fcd94b5", @ANYRES16=r3, @ANYBLOB="08002cbd7000fedbdf2505000000140002800800060007000000080007000500000008000500010000806400038006000400c90a000008000500ac1414bb060007004e23000008000100f0000000080001000000000014000600fc010000000000000000000000000000050008000400000014000600fc01000000000000000000a45160cf6f308b000000000006a16f1332cf55d2340cee26a4ff183679864a7075939632825069b19c3f2f116967756af65a73228f0bb6a5d0849b88b358bb"], 0x94}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f3, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000ddffffffffffffff000000000000030000007117a55c83e377b54c2d4226cb9ffcdff423d008bf330a08c13fbbd58a1c3e422ac5222a13c7c61974e79f0a53217f37fe5a2d0dcfdd47d6ad1abd385507933a07f13d081417b53205587b3c9b130b3508cab87d2978e7af08b865c6e58a7c41add2e7f988"]}) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 21:20:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 21:20:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xc1, 0xff, 0x0, 0x60, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x0, 0xe65, 0x6}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x5, 0x81, 0x101, 0x18, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20, 0x80, 0xff, 0x80}}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@bridge_delneigh={0x74, 0x1d, 0x800, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r5, 0x20, 0x84, 0x9}, [@NDA_PROBES={0x8, 0x4, 0x10001}, @NDA_IFINDEX={0x8, 0x8, r6}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0x5, 0x7, 0x1, 0x7}}, @NDA_VNI={0x8, 0x7, 0xffff}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_SRC_VNI={0x8, 0xb, 0x9}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x11, 0xb, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2=0xe0000000}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}]}, 0x34}, 0x1, 0xf0ffffff}, 0x0) [ 1378.465375][T25670] IPVS: ftp: loaded support on port[0] = 21 [ 1378.471848][T25673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1378.552738][ T27] audit: type=1804 audit(1598995239.536:1331): pid=25666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1552/cgroup.controllers" dev="sda1" ino=16073 res=1 errno=0 [ 1378.595439][T25670] lo speed is unknown, defaulting to 1000 [ 1378.597003][T25682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="01000000000000000b00010062726964676500000400028000000000"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="098e225a3243493537e4ecb866255927fcfa18853a346fec9865adfe7c1c057238dfe9838a31a11f0cc93a6be8eff15e6a96f8658773433bc33596348643643cffcc426f4408d9903a990b64f099e416bff6b43787fdb6c2ce6473654f98dd42c041245bfd170ae3011a3e2bd90c87985bec942cf1cbd3c84a4abc4531068b3aeb389df3e99ec58ad4028b6affc2cf277cdf835e240d00"/164], 0x4c}, 0x1, 0x0, 0x0, 0x24008804}, 0x0) [ 1378.818801][ T27] audit: type=1804 audit(1598995239.626:1332): pid=25687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1382/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 21:20:39 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x8001) sendfile(r2, r1, 0x0, 0x100000001) [ 1379.016232][T25729] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1379.048380][ T27] audit: type=1800 audit(1598995239.726:1333): pid=25666 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16073 res=0 errno=0 [ 1379.068038][T25729] bond7 (uninitialized): Released all slaves 21:20:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)="02158ae123527862c2a95889cbdd8b25a95cbc983f30d52a0fc2dce3b59778499215dc5da8cd8f4605b1350f783d8e99e2a397a4b30c4e7403a06b741bed0c12e6143d27542c004bd01cfccc75754ccf8a858da036e49abed6d76ddfa47c339c8a732a77a9337072915938a1a1478c3d73a6040724b1ddd36e3e8a4cf2653dd3312ff8805d58362c19f512c4a8c2c0c23d5a80e69917607be38fd4408a6bf87d869da8", 0xa3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6}]}}}]}, 0x44}}, 0x0) [ 1379.138475][T25730] bridge9: port 1(veth51) entered blocking state [ 1379.171447][T25730] bridge9: port 1(veth51) entered disabled state [ 1379.219963][T25730] device veth51 entered promiscuous mode [ 1379.255812][ T27] audit: type=1804 audit(1598995240.236:1334): pid=25741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1553/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 [ 1379.291603][T25729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:40 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001780)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x38, 0x140b, 0x4, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c005}, 0x8010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 1379.353883][T25734] bridge9: port 2(veth53) entered blocking state [ 1379.411366][T25734] bridge9: port 2(veth53) entered disabled state [ 1379.423670][ T27] audit: type=1804 audit(1598995240.296:1335): pid=25743 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1553/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 [ 1379.459947][T25734] device veth53 entered promiscuous mode [ 1379.505865][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:40 executing program 1: syz_emit_ethernet(0xe6, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000b03a00fe8003100000000000000d07000000aaff020000000000000000000000000001110000000000000087020401028c08000000000000000000000000000000000032007fc867000000620500000000000005027fff0710000000020207070002000000000000000502003f050200020001000502c731000100020090780000007c607f112d8001290000000000000000000000ffffac141400fe8000000000000000000000000000bb000204010000001b9170db463f2500fe8000000000000000000000000000bb1876f17ac1233a5afe80000000000000"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000480)={0x0, 0x4, 0x800, 0x9}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="000c597f53aedf267054b73c169f21bbe1399b"], &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f00000004c0)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0xfffffffffffffee5}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) [ 1379.641853][ T27] audit: type=1804 audit(1598995240.626:1336): pid=25755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1554/cgroup.controllers" dev="sda1" ino=16377 res=1 errno=0 [ 1379.745664][T25670] IPVS: ftp: loaded support on port[0] = 21 [ 1379.852505][T25670] lo speed is unknown, defaulting to 1000 [ 1380.509336][ T114] tipc: TX() has been purged, node left! [ 1380.521373][ T114] tipc: TX() has been purged, node left! [ 1380.530967][ T114] tipc: TX() has been purged, node left! [ 1380.549152][ T114] tipc: TX() has been purged, node left! [ 1380.576839][T25791] net veth1_virt_wifi À: renamed from virt_wifi0 21:20:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:43 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x3c) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000300)="ad7775186da2d1273e9cb653d7639ecc83f63a932b1f86ece857dedffde1e42447a5214efe4e784a95650ccf9fc230c3012b4350677bacba8cd5c79b032b36a4feddcac0b07c8d733d2b8c26b1e5887d194b23f879680747da9d554f5992f2d50c3cdc3502c86cc1e217cb4b22b8fb941790cb5dcd4a97421ff719c946570f48cb4fd937a1f474661d8733062e191d3c0ffca860bc27675ee9a429436d3aa8f997c1023cf9fe18a5b8ebc641fe", 0xad}, {&(0x7f00000004c0)="0d5056aa3536ec4ad1f5574e98db6eca1b9c39ad211c943374734c194d4846e98834c590485d4464dbbe3193f04ecbb9fabc76629280e7f0763d4bcee70d22f4fdab5f10ca4d3997e9b0801f700d87a4ca111a96b925a458b9e6a025e4fb7d70ead080f4d6992773040d4d60464a5a5542816ec010fdc0ad6fe62daeebdbcb579d7556b5f7b628faf6fd4494b8ae3aa9056499bdcb48327c33b0f28c46d582dd2dc15b6d8d2e48e8823e2b26a95da666fa939354b555fff79a8da40990b7887112f062ce21bffb4d1006", 0xca}, {&(0x7f00000005c0)="3c6af7531533bbecf51781b0cd042c2fa2302a0280b3c0430bd6e16fed008338ab3bd0efb062ea4d5435ca5307f8ff827429e39b96021757e0c9533ec033c9b2656a1a002634010b6c2a1ad37eb65b2b9c287c994ae093bfc3504cccdcefafb1a17f2884e4c0489ae60defda4f621e5b26eec6f7b7ca7c5927cb761a40217154548afb77974bada0dc84dffcd0b5360acdd4a567add9fd57886cbe030398b4cdc654515203b721b9e025a23564282c29bdd8470ce4ce8acb1e8a765d83fa5c1828", 0xfffffe7f}, {&(0x7f00000008c0)="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", 0xe3}], 0x4) 21:20:43 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'lo\x00', r2}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) 21:20:43 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r2, 0x0, &(0x7f0000000180), 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000001c0), 0x4) sendfile(r2, r1, 0x0, 0x100000001) 21:20:43 executing program 1: syz_emit_ethernet(0xe6, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000b03a00fe8003100000000000000d07000000aaff020000000000000000000000000001110000000000000087020401028c08000000000000000000000000000000000032007fc867000000620500000000000005027fff0710000000020207070002000000000000000502003f050200020001000502c731000100020090780000007c607f112d8001290000000000000000000000ffffac141400fe8000000000000000000000000000bb000204010000001b9170db463f2500fe8000000000000000000000000000bb1876f17ac1233a5afe80000000000000"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000480)={0x0, 0x4, 0x800, 0x9}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="000c597f53aedf267054b73c169f21bbe1399b"], &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f00000004c0)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0xfffffffffffffee5}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) [ 1382.299206][T25804] IPVS: ftp: loaded support on port[0] = 21 [ 1382.319798][ T27] audit: type=1804 audit(1598995243.296:1337): pid=25801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1555/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1382.417723][T25804] lo speed is unknown, defaulting to 1000 [ 1382.618836][ T27] audit: type=1804 audit(1598995243.596:1338): pid=25808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1555/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 21:20:43 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400ca0000000a2014c200000a0100000000002f000000000000000900010073797a300000000038000000120a0000000400048009090200020300000000001a0900010073797a2000000000080003400002000100"/97], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0x10000, 0xc09c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0x1, 0x5cdba2a9, 0x1}) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) ioctl$FIONCLEX(r5, 0x5450) 21:20:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_buf(r2, 0x0, 0x2b, &(0x7f0000000280)=""/160, &(0x7f0000000080)=0xa0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000000f80005000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1382.713986][ T27] audit: type=1804 audit(1598995243.606:1339): pid=25801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1555/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1382.865398][T25843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1382.927058][T25843] device veth61 entered promiscuous mode [ 1382.955633][T25841] device veth61 left promiscuous mode [ 1382.967633][T25843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1382.987962][ T27] audit: type=1804 audit(1598995243.966:1340): pid=25845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1556/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 [ 1383.057058][T25847] device veth61 entered promiscuous mode [ 1383.064799][T25847] device veth61 left promiscuous mode 21:20:44 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) r1 = socket$inet6(0xa, 0x80003, 0x7) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x9fa6, 0xff}, @mss={0x2, 0x8}, @mss={0x2, 0x10001}], 0x3) 21:20:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000940)={0x0, 0xffffffffffffffa4, &(0x7f0000000040)={0x0}}, 0x20044810) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e2e131ee5cb", 0xa0}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x72}, {&(0x7f0000000180)="a0b9c607a990b5d6194f441a04fbbe9e", 0x10}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d6", 0x24}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdb000000080402000500000008000200ff7f00000804fb00655b72a177fadc4763730002002e0d000000000006e5f31f2d717a43071cbd9a9c233eb7e81c044c4b14fa4cff3c33106d7178e8923bb400ca4eec4478475a81b84ceb53f0a1541ed1e1be86f1f37e601428e5493bd48e65265ce8474e30d1604b5eb41a4aba59c72ef59cf6ac9befbc6647d7e83e5f0d28d5134706673017f59641bf0638d0fd6496c190f558f94f664580ddb274d9481cf03c083cc829efff3521ea7323925f5b33e6a477e0c0ddb8881a27b6cff834518bf407bedec6bd97"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x881) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x60000) sendfile(r2, r1, 0x0, 0x100000001) 21:20:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xf, 0x6, 0x101}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fd014c09be3c8c7bb20f55d759"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a8c35cdd92"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x3d}}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "46d4245fef"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7da990a4d6aa9e450c1596fbc4"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = socket(0x11, 0x5, 0x1000) connect$nfc_llcp(r3, &(0x7f0000000500)={0x27, 0x0, 0x0, 0x7, 0x5, 0x1, "0b27b087de91fd3f7724d6a890fb3e697364e5164a04683672244b0b5c0c83b849a2b3104dae024b207ac91f6bf3697f3f8bc1cb81abfcc7cff5cdbbe63666", 0xe}, 0x60) socket(0x18, 0x2, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013700000000000000d2000000", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x140d}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x18, 0x2d, 0x0, 0x1, [{0x9, 0x0, [0x1d, 0x12, 0x6, 0x5, 0x7]}, {0x7, 0x0, [0x17, 0x1a, 0x2]}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c3}, 0x40) [ 1383.238288][T25804] IPVS: ftp: loaded support on port[0] = 21 21:20:44 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x100, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010048907a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000006d00034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1383.371143][T25804] lo speed is unknown, defaulting to 1000 21:20:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000780)=0x1, 0x5a) r1 = socket(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$ppp(r2, &(0x7f0000000080)="d0f95e9fafaf622ec705e4380faf48ae94f4", 0x12) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7e1, @private2={0xfc, 0x2, [], 0x1}, 0x8}, 0x1c) [ 1383.646547][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1383.646562][ T27] audit: type=1804 audit(1598995244.626:1345): pid=25891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1557/cgroup.controllers" dev="sda1" ino=15811 res=1 errno=0 [ 1383.687159][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:20:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000940)={0x0, 0xffffffffffffffa4, &(0x7f0000000040)={0x0}}, 0x20044810) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)="6a154e60b19d3618c645a61e2abb2b676bbf565740d05211fbe9a62c91fb7622dede2270bd05b3750e628461641007bdeda2340d78a42f1127bca90ac7e5fa4313fb2644f8d837466dfd05889bc515eb05cc553c3fae57f0bd8301dfa78867aadb488433758122b99112bc45e3e46822ed9b82689ff1f384cd1e471911e9cd57916c8c6f28ed54", 0x87}, {&(0x7f0000000000)="8f3ace4b6a766e453e3229049c0523ac0e78b7929e45ab8257f6ca5b45b32424eb72dd51863f81d78dd6b8", 0x2b}, {&(0x7f0000000100)="70241c49d85a353827fd16cc21a3", 0xe}, {&(0x7f0000000380)="fbcb5e531a557f078bf0c43df860c0f84d540a64e7ee0e88032a94962d21edad85b75b1d4eba862719482a39aaaaa03e3bfcd6ab940fe6553f68111fcdb698c13ca4e739f0f1b2a8", 0x48}, {&(0x7f0000000400)="ade64c41c9d4a273f733a7b8bb25b686a770759f3a6843e838780ae9ced8108050e6d540c09e163ff9114869bfa58759bfa1bde20d259d70f1d7f312a60982ea9e437607f13318caec7f521f869b9e80c23e1fa5f3ea3b77e3eba3474be02933d6d5875bcce6997cd59bb95541de0cc34a8fecb84758b01eb60bce1de62b6c24816cbf4f5a0ffbeb0dfe23c7307014267b340ca28f26cd3ae5722e2e131ee5cb", 0xa0}, {&(0x7f00000004c0)="540ae89df3d21707fcb768aacd691327dc70a950ed47fe36320f6a1d5da4b0d4ca3e43bb2e401f0a84cbc70bad8e1659a30517b58979ca1d351a7b13c6d0b8663139c32db1debc49dc5a9955a4ee51e184ddc61b5d02ce92ab79adcf59e525d022445cf309a7e8abafad3c78043e1e1fa84f", 0x72}, {&(0x7f0000000180)="a0b9c607a990b5d6194f441a04fbbe9e", 0x10}, {&(0x7f0000000540)="ef8bf68c64c9527bd4d2ecf2d629d9035d811dbcab0a0db723f7b60adef5045e5e28f5693488d55b3d4d9751438518e7bededcf3df50144f1a8f9916cd72590e81256d51e7388a4a95bd5147fe8cdd59a7f876eb85677aa01474f1627704b04fe2190d6f65fcb8b22c4c609896b123e9289486ad54d5d3", 0x77}, {&(0x7f00000005c0)="900575c34d1d097798525b4c063d0466c62e80d83b39f49839d04abe5d97f4fab8c361d6", 0x24}], 0x9, 0x0, 0x0, 0x881}, 0x4000820) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000780)=0x4) r4 = accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdb000000080402000500000008000200ff7f00000804fb00655b72a177fadc4763730002002e0d000000000006e5f31f2d717a43071cbd9a9c233eb7e81c044c4b14fa4cff3c33106d7178e8923bb400ca4eec4478475a81b84ceb53f0a1541ed1e1be86f1f37e601428e5493bd48e65265ce8474e30d1604b5eb41a4aba59c72ef59cf6ac9befbc6647d7e83e5f0d28d5134706673017f59641bf0638d0fd6496c190f558f94f664580ddb274d9481cf03c083cc829efff3521ea7323925f5b33e6a477e0c0ddb8881a27b6cff834518bf407bedec6bd97"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x881) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) unshare(0x60000) sendfile(r2, r1, 0x0, 0x100000001) 21:20:46 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000000c0)={0x8, 0x1fb}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) 21:20:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f00000003c0)={0x30, {0x24, 0x0, 0x0, 0xfffffffffffffffd, 0x10001}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3bf545aaf6e000085a4e40c07ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400010700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006ac5fd3708000b00aeb25a90"], 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000300)={0x67, 0x3, 0x8, 0x8, 0x9}) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0) 21:20:46 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/219, 0xdb}, {&(0x7f0000001540)=""/165, 0xa5}, {&(0x7f0000001600)=""/240, 0xf0}], 0x7}, 0x10001}, {{&(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001780)=""/133, 0x85}, {&(0x7f0000001840)=""/93, 0x5d}], 0x2, &(0x7f00000018c0)=""/247, 0xf7}, 0x7}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000001a40)=""/219, 0xdb}, {&(0x7f0000001b40)=""/37, 0x25}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/197, 0xc5}, {&(0x7f0000003c80)=""/42, 0x2a}, {&(0x7f0000003cc0)=""/54, 0x36}], 0x7, &(0x7f0000003d80)=""/218, 0xda}}, {{&(0x7f0000003e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003f00)=""/56, 0x38}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/135, 0x87}, {&(0x7f0000005000)=""/6, 0x6}, {&(0x7f0000005040)=""/57, 0x39}, {&(0x7f0000005080)=""/186, 0xba}, {&(0x7f0000005140)=""/128, 0x80}], 0x7}, 0x1c}, {{&(0x7f0000005240)=@rc, 0x80, &(0x7f0000005500)=[{&(0x7f00000052c0)=""/13, 0xd}, {&(0x7f0000005300)=""/145, 0x91}, {&(0x7f00000053c0)=""/64, 0x40}, {&(0x7f0000005400)=""/128, 0x80}, {&(0x7f0000005480)=""/83, 0x53}], 0x5, &(0x7f0000005580)=""/69, 0x45}, 0xc3}, {{&(0x7f0000005600)=@ethernet, 0x80, &(0x7f0000005840)=[{&(0x7f0000005680)=""/113, 0x71}, {&(0x7f0000005700)=""/27, 0x1b}, {&(0x7f0000005740)=""/26, 0x1a}, {&(0x7f0000005780)=""/100, 0x64}, {&(0x7f0000005800)=""/55, 0x37}], 0x5, &(0x7f00000058c0)=""/177, 0xb1}, 0x6}, {{&(0x7f0000005980)=@xdp, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005a00)=""/15, 0xf}, {&(0x7f00000077c0)=""/176, 0xb0}, {&(0x7f0000005b00)=""/127, 0x7f}, {&(0x7f0000007740)=""/102, 0x66}, {&(0x7f0000005c00)=""/252, 0xfc}, {&(0x7f0000005d00)=""/81, 0x51}, {&(0x7f0000005a40)=""/162, 0xa2}, {&(0x7f0000005e40)=""/219, 0xdb}], 0x8, &(0x7f0000005b80)=""/39, 0x27}, 0x7}, {{&(0x7f0000006000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000006240)=[{&(0x7f0000006080)=""/250, 0xfa}, {&(0x7f0000006180)=""/120, 0x78}, {&(0x7f0000006200)=""/10, 0xa}], 0x3, &(0x7f0000006280)=""/1, 0x1}, 0x80}, {{&(0x7f00000062c0)=@ipx, 0x80, &(0x7f0000007440)=[{&(0x7f0000006340)=""/120, 0x78}, {&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/66, 0x42}], 0x3}, 0x1000}], 0x9, 0x0, &(0x7f00000076c0)={0x77359400}) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000100)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="b2", 0x8}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 21:20:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, r4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e23, 0x10000, @mcast1, 0x7ff}}}, 0x84) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000180)={@local, @dev, @empty}, &(0x7f0000000200)=0xc) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102010000088400800000000b000500010007"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e000000002020000000000000000f8ff0a0000020c000280060003400000000044000a803c0002802c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c00028005000100880000000400028013000b0063616c6c666f727761722dd0af6700000e0006006674702d3230303030000000580003802c00018014000300fc010000000000000000000000000000140000001a06000340000000000c00028005000100a900000006000340000400000c000280050001001100"/224], 0xe0}, 0x1, 0x0, 0x0, 0xb210dac38c278011}, 0x40001) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000580)) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000500)={r4, 0xfff}, &(0x7f0000000540)=0x8) [ 1385.541977][ T114] tipc: TX() has been purged, node left! [ 1385.548016][ T114] tipc: TX() has been purged, node left! [ 1385.746969][ T27] audit: type=1804 audit(1598995246.726:1346): pid=25939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/809/cgroup.controllers" dev="sda1" ino=16092 res=1 errno=0 [ 1385.903355][ T27] audit: type=1804 audit(1598995246.756:1347): pid=25931 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1558/cgroup.controllers" dev="sda1" ino=16147 res=1 errno=0 21:20:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x1) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x7, 0x4) 21:20:47 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15d4b87) ioctl$FS_IOC_FIEMAP(r1, 0xc020662a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000faffffffffffffff0000000000000000011900"/88]) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) 21:20:47 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = socket(0x10, 0x2, 0x5) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="780106890f74128f5382cd74a76f350166930d09c9bdeeda1772b3e7fbcad1620c3f99daa4c4da3833f61a6c83fe65d6f77dbd8247c6d6bcb2df589aefb6b3e6808f7b33921ca54ad29f9c2104176aee27ff45324ba0a8311cc41710d168711a6dc556b12a130754d5f450f7db7dcfe403e30ea5571e479cc5601c5915e6b0f204055bc9253b8b6835e701d80612fe8fefa32ffe581b2d7b5468ae61f927a28fb8cceb20cd89ca", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x405, 0xff, 0x5}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x962}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) [ 1386.087553][ T27] audit: type=1804 audit(1598995246.796:1348): pid=25936 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1387/cgroup.controllers" dev="sda1" ino=16163 res=1 errno=0 21:20:47 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}}, 0x80) [ 1386.266489][ T27] audit: type=1804 audit(1598995247.126:1349): pid=25940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1558/cgroup.controllers" dev="sda1" ino=16147 res=1 errno=0 21:20:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) accept4$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001400)=0x1c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x103ffffff) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 21:20:47 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000000c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1386.786022][ T27] audit: type=1804 audit(1598995247.766:1350): pid=25986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/870/cgroup.controllers" dev="sda1" ino=16147 res=1 errno=0 [ 1386.925496][ T27] audit: type=1804 audit(1598995247.816:1351): pid=25987 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1560/cgroup.controllers" dev="sda1" ino=16163 res=1 errno=0 [ 1387.108501][ T27] audit: type=1804 audit(1598995247.866:1352): pid=25989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/870/memory.events" dev="sda1" ino=16115 res=1 errno=0 [ 1387.258750][ T27] audit: type=1804 audit(1598995247.876:1353): pid=25989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/870/cgroup.controllers" dev="sda1" ino=16147 res=1 errno=0 [ 1387.374693][ T27] audit: type=1804 audit(1598995248.046:1354): pid=25990 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1560/cgroup.controllers" dev="sda1" ino=16163 res=1 errno=0 21:20:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') 21:20:49 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) unshare(0x68020400) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0xd4, 0x2, 0x2, 0x10001, 0x1f, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x1ff, 0x4) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000280)=0x407, 0x4) 21:20:49 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000000f90000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000900020002000000000000002300010073797a3000000000080003400000000100"/108], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:20:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f00000003c0)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x4, @remote, 0xbb9c}, @in6={0xa, 0x4e22, 0x5, @empty, 0x6}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, [], 0x1}, 0x6cf20189}, @in6={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}], 0x70) 21:20:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) accept4$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001400)=0x1c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x103ffffff) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 21:20:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x18000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000004) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000c1f010062726964f901757d203568f18bf76100"/31], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@local}}}]}, 0x38}}, 0x0) [ 1388.898280][T26019] IPVS: ftp: loaded support on port[0] = 21 21:20:49 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x72be, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x76, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000002) [ 1388.925328][ T27] audit: type=1804 audit(1598995249.906:1355): pid=26016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1561/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 [ 1388.961419][T26016] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1389.082007][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1389.194120][T26019] lo speed is unknown, defaulting to 1000 [ 1389.195552][T26035] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 1389.220033][ T27] audit: type=1804 audit(1598995250.196:1356): pid=26017 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/871/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 1389.246522][T26035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:20:50 executing program 0: unshare(0x40000000) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0xc817) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) write$nbd(0xffffffffffffffff, &(0x7f00000002c0)={0x67446698, 0x1, 0x4, 0x0, 0x2, "df8f0531860a8f09c0d7bdce6abf15474b4410179f75e8b1d17cffd196b34b213a5ffb3f07eab5161062ebb8edb850558c682995e823fe89c6bc665002cbe3b1f1216e5b94d2229063ae45fcfa2aeae6f6e9d92f547dc36fb4bc1fdc26d64b28596b95da1a358b401df441a226cdddbfdd7064552057dc8989c3f8e7dccc634e0aeb50e53322c7e4437f6bcdd5"}, 0x9d) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty=0x60}}) [ 1389.405524][ T27] audit: type=1804 audit(1598995250.276:1357): pid=26022 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1561/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 [ 1389.666783][T26061] IPVS: ftp: loaded support on port[0] = 21 [ 1389.720331][ T27] audit: type=1804 audit(1598995250.276:1358): pid=26016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1561/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 [ 1389.813029][T26061] lo speed is unknown, defaulting to 1000 21:20:50 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$FITHAW(r1, 0xc0045878) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000400400001060000ac9a9e2dd4314e713c319a00000000000002688300019a0800010000000000"], 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @qipcrtr={0x2a, 0x3, 0x3fff}, @ipx={0x4, 0x6, 0x3ff, ':E=mry', 0xd1}, @xdp={0x2c, 0x2, 0x0, 0x1}, 0x101, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000180)='veth1_to_hsr\x00', 0x7fffffff, 0x8001, 0x101}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xb5, 0x4, 0x1, 0x22, @mcast1, @local, 0x8000, 0x70, 0x7, 0x2}}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000580)="9ccdc84bb8fa173625b29802febc227ce03a7b0d1410050d07cd74a47447d9d1a5bb5f5b13c8ed5e99c1250d18ee1c3467b712591addccd89cb71685abfc6f8effe87b21acf91fde41db8b1feff3de5d33e52d5a6df9a25d33ad84d72f656c", 0x5f}, {&(0x7f0000000600)="89f5ae9d50186410d3aeb01e6269d1d014d3facfef2768cbc53219c8fd147071967cba7b3d07ed0905ab847a748ba76373e171d97116bf1916a60b4fb702f5777440de304e630aadf1517696f6c49f5b9aa43352d32c640c4c3260be968c658c4c60c89dec635638608f940b0a1f9f93865c4d512c701d28e23b1e926ec12f30db8589bef272ead882a6979329ad836871838146f7024f7a160465512b489d6b266e29f5fbc8275bca38be2772b2185bfadab65a83274b1a59651b2651e0d863030bbc52dd14469cc68edf25a3e7f8482615db179a513b0808f0f70d5aa7ee53017c02e0d8ae5f83", 0xe8}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="aa777ad7024bdfa4443d2d718ec1e1539b8d02447388ecc301eb8504154099e3210841dba413d34b04fe531842178933a6296567eb75306fbb1650e507b7a7b245bffb068c6a2a600885545f0844dbd74ba24f4df1376e2fd940ee6fd6", 0x5d}], 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000001840)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf250d0000004c00018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020074756e6c300000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32, @ANYBLOB="080003000300000044000180140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="00000000000010000081dc1fb65e0918b84391938c92f826d5fc1adb1a37c26d78ddefdcd5a51f125de47f182f916910efe9749302acb5011df3339dd7740d25659b43ef724b49cde5f8610224535657a0"], 0xa4}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) r8 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x84, 0x10, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r8) 21:20:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e000000200000000b954561a0000000008000000"], 0x38}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x7) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000240)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 1389.942020][ T27] audit: type=1804 audit(1598995250.286:1359): pid=26037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1229/cgroup.controllers" dev="sda1" ino=16372 res=1 errno=0 21:20:51 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x62, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="4eff9c6bbb139ec555ce368af5f48cc227677a0749f7214345fe7563235c3c840b90fb0fcd461b35b3f1d04c61be9301205193422860cc678bdebf09e28f829c14a507692787089e271e444ca9c3c5943e2c4578512cc9e4146cf6bd577fd9d940240b37ed9c274372a3c46bca84920564fd2d87c948259bc4e79fce225559df3185a370dfb5646bb03f01d0da6cd9a636daa670f4c01c67ace2162279bab31340ca51d31eec4f3a"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x54) [ 1390.142515][ T27] audit: type=1804 audit(1598995250.376:1360): pid=26028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/871/memory.events" dev="sda1" ino=16383 res=1 errno=0 [ 1390.224314][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1390.320406][ T27] audit: type=1804 audit(1598995250.376:1361): pid=26028 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/871/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 [ 1390.345648][T26092] PF_BRIDGE: br_mdb_parse() with invalid entry [ 1390.495207][ T27] audit: type=1804 audit(1598995251.206:1362): pid=26088 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1562/cgroup.controllers" dev="sda1" ino=16089 res=1 errno=0 [ 1390.550400][T26092] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 1390.557836][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1391.297896][T26061] IPVS: ftp: loaded support on port[0] = 21 [ 1391.332093][T26061] lo speed is unknown, defaulting to 1000 [ 1391.495720][ T114] tipc: TX() has been purged, node left! 21:20:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000fcfffffffffffffe", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000003b00270d00000000000000000000f005", @ANYRES32=r5, @ANYBLOB="00000000000000005865f1ff"], 0x24}}, 0x0) 21:20:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = accept(r0, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xff24}}, 0x11) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x2, r5, 0x27}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010d7be0309000000e1e400002c00000210f9c12e1e7df3d87c1b4f43c2a0982e7196854cb24f6c668765947bd6ea4cea3f8f09157da49ad1a734e111e04f199838b8c78b6d7e32938b7ff04037", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012800b00010062726964676500000c000280050017"], 0x3c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty, r5}, 0xc) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 21:20:53 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = accept4(r0, &(0x7f00000002c0)=@xdp, &(0x7f00000001c0)=0x80, 0x100800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040011}, 0x4048000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="080009b4d010f8addebe4a000948024a00010076657468"], 0x48}}, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a10005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:20:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x25f) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x3, &(0x7f0000000580)="638b79bd79246d3dca11676f89e539b1", 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000e400000000de3bb74e8500000000000000a5ece5517680f18ab0f7654ac3cb0149e5997345d93cc74aa2b11d466903e36d8ebb32001a4ec8dce7835faf001d984f5d2bed602775633c90461c0aef8879933fbb", @ANYRES32=r5, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000140)=0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x3, 0x3, 0x5, 0x0, 0x0, {0x4ebf161f674800a7, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004015}, 0x20000054) socket$inet6(0xa, 0x2, 0xcf7b) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 1392.187806][T26141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1392.209832][T26140] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1392.228514][T26141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:20:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88402, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) getsockname$qrtr(r2, &(0x7f00000000c0), &(0x7f0000000140)=0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', {0x7, 0x4, @broadcast}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x26) 21:20:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="d6bbbbbbbbbbaaaa14ede0eb8479d939080045000020000000000011d2c2e320f6bcb72332d8ae58ce5fe6e854"], 0x32) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1392.244030][T26149] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 21:20:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xfb15556c8da9cff, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x439, 0x0, {r3, r4/1000+10000}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "bae6f7b826d04eb2"}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4000099) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180), 0x10) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000007e0000004500008000000000008490780a0101a79e15d9ebe602e0d95bfb7b02ac14141d000000000401907800000b08b45a3b7156dcf90100003fccbfc12abc282c27820fd91186008206000600110000000094ce7f17e89fb5f1112b33df4c36ec81533c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063"], 0x8a) 21:20:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x5000) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 21:20:55 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000280)={0x80000000, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) 21:20:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x1c00) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x4924924924925c6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001340)="7e10", 0x2}], 0x1, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x80}) 21:20:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000009f84bb57964b29228625024308004500004f000000000006907800000000ac1414bb0420880b0000000000000800000086dd080088be00000000100000010000000000000008ca9cd169000000200000000400000000000000000000000800655800000000aa149d6cb098341adf855f19021c09f0ec86262b0b53e0a8ea842ff98634dd8fecf52417a61b997396f0f2bd4cdeb6d5413dbbe0d30e2a55254a540f0b2077ac5299d1a0c664f750309a27e86cefb944561b89106e732bf6e07c00"], 0x6a) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) [ 1395.014399][ T114] tipc: TX() has been purged, node left! [ 1395.021850][ T114] tipc: TX() has been purged, node left! [ 1395.103568][ T27] audit: type=1804 audit(1598995256.087:1363): pid=26224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1563/cgroup.controllers" dev="sda1" ino=16120 res=1 errno=0 21:20:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0'}, 0x200001c4) 21:20:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xffffffff}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x341, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r4, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r4, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x1, 0x3}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, r6, 0x800, 0x70bd26, 0x5, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40048041) splice(r4, &(0x7f0000000040)=0x42, r5, &(0x7f00000010c0)=0x1, 0x7f, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r2, 0x29, 0x3f, 0x9, 0x7, 0x28, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, 0x7800, 0x7800, 0xfffffffe, 0x40}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x7, &(0x7f0000000580)=@raw=[@map={0x18, 0xb, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xe, 0x10}, @exit, @generic={0xff, 0x7, 0xf, 0x3, 0x100}], &(0x7f00000005c0)='GPL\x00', 0x2, 0xbd, &(0x7f0000000600)=""/189, 0x0, 0x5, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x2, 0x6, 0x7}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x485}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x4, 0x6, 0x0, 0x8000, 0x32af}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, @map={0x18, 0x0, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd0ed, 0x0, 0x0, 0x0, 0x800}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000080)='GPL\x00', 0xe79, 0x73, &(0x7f0000000340)=""/115, 0x40f00, 0x92afcf026eab2eba, [], r7, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x8, 0x1ff, 0x2}, 0x10, 0x0, r8}, 0x78) [ 1395.355499][ T27] audit: type=1804 audit(1598995256.337:1364): pid=26228 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1563/cgroup.controllers" dev="sda1" ino=16120 res=1 errno=0 21:20:56 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000080)=0x1, 0x4) sendfile(r2, r1, 0x0, 0x100000001) 21:20:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000280), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private}}) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r6}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=@newchain={0x48c, 0x64, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0xb}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x428, 0x2, [@TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4264e7a7}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x4, 0x7fff, 0x0, 0x3360, 0x9, 0x80, 0xfffffffe, 0x4, 0x9, 0x7, 0x7fffffff, 0x3, 0xfffffff9, 0x0, 0x625b942d, 0x0, 0x6, 0x3ff, 0x1000, 0xff, 0x5, 0xb6bf, 0x1f, 0xf37d, 0x1, 0x10000, 0x6, 0x9, 0x5, 0x10001, 0x14cf, 0x7, 0x5, 0x5, 0x73, 0x1, 0x0, 0xffffffff, 0x400, 0x7ff, 0x5, 0x8, 0x100, 0x0, 0x6, 0x415, 0x9, 0x0, 0x3, 0x6, 0x276d, 0x100, 0x6224, 0x4, 0xfff, 0x8, 0x69e9f7db, 0xc00, 0x7, 0x7, 0x9, 0x6, 0x8, 0xfffffff8, 0x7, 0x2, 0x81, 0x7, 0x1f6c, 0xa0200, 0x5, 0x8, 0xdb, 0x0, 0x2, 0x9, 0x4, 0xe8000000, 0x8, 0x6, 0x5, 0xfff, 0x7, 0x2, 0x1ff, 0x0, 0x5, 0xd3, 0x2, 0x0, 0x21, 0x0, 0x4, 0x7ff, 0x400, 0x1f, 0x5, 0x1, 0x2, 0x0, 0x6, 0xfffffffe, 0x4, 0xa, 0x4, 0x1, 0x81, 0x0, 0x80000001, 0x10001, 0xcfd, 0x3, 0x80, 0x1, 0x7f, 0x1, 0x7, 0x0, 0x5, 0x5, 0x0, 0x3, 0xc8e7, 0x5, 0x0, 0xf0000000, 0xba9, 0x8, 0x6, 0x5, 0x81, 0xaa0c, 0x7, 0x7f, 0xf01, 0x3, 0x6, 0x6b0e, 0xb363, 0x3, 0x1000, 0x5, 0x8, 0x0, 0xfff, 0x3, 0x7, 0x7, 0xff, 0x200, 0x129, 0x6, 0x73, 0x0, 0xeb7c, 0x8, 0x8, 0xd506, 0x1ff, 0x8000, 0x9, 0x0, 0x6, 0x6, 0x8000, 0x5, 0x6f4, 0x8000, 0x8, 0xa2ca, 0x9, 0x9, 0x80000000, 0x7, 0x9, 0x3, 0x8, 0xffff, 0x1e4c, 0xb537, 0x3, 0x6, 0xfff, 0x1, 0x7, 0x2, 0x80, 0x0, 0x5, 0x9, 0xe6b, 0x8000, 0xffffff00, 0x5, 0x6, 0x8e7, 0x9ba, 0x1, 0x3ff, 0x3, 0xe, 0x5, 0x7f, 0x8001, 0x39c, 0x9, 0x5, 0x2, 0x200, 0xf4b9, 0xa8, 0x6, 0x7, 0xfff, 0x9, 0x2, 0x5, 0x5, 0x9, 0x800, 0x0, 0x8, 0x2, 0x4, 0x8, 0x6, 0x8, 0x2, 0x3f, 0x2, 0x1, 0x8, 0x1, 0x6, 0x4, 0x9, 0x1, 0x7fffffff, 0x9, 0x7644, 0x8, 0x2, 0x2, 0xfffff001, 0xf0000000, 0x6, 0x8, 0x9, 0x40, 0x8, 0x7fffffff, 0x0, 0x7, 0x5, 0xd5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x800}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xff, 0xffffffff]}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000000) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00', 0x4) r8 = accept(r6, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xfffffd33}}, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b6c0)=""/102400, 0x19000}, {&(0x7f000000b500)=""/153, 0x99}], 0x2}, 0x40000163) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 1395.480724][ T27] audit: type=1804 audit(1598995256.337:1365): pid=26224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1563/cgroup.controllers" dev="sda1" ino=16120 res=1 errno=0 21:20:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 21:20:56 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1395.884712][T26236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1396.160714][T26239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:20:57 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000075ecbb0d000900010073797a30000000000800034000000001"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100250152ddd7dbe945f5a89a467b890fedc72ab914370000", @ANYRES32=r4], 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0xfffffe6f) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', r5, 0x8, 0x700, 0x1ff, 0x81, {{0x1d, 0x4, 0x2, 0x38, 0x74, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x13, 0x51, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @cipso={0x86, 0x24, 0x3, [{0x0, 0xb, "04778009bffff4c0ef"}, {0x7, 0x8, "f5d0c42d8f2d"}, {0x1, 0xb, "6bcf735c20bf282ef5"}]}, @ssrr={0x89, 0x23, 0x96, [@rand_addr=0x64010101, @multicast1, @loopback, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x58, r6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000180)) sendfile(r8, r7, 0x0, 0x100000001) 21:20:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xff}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) r8 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, 0x8) 21:20:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x12a0, 0x0, 0x1130, 0x0, 0x0, 0x1130, 0x1208, 0x1208, 0x1208, 0x1208, 0x1208, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x2, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'bond0\x00', 'hsr0\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1300) 21:20:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)={0x40, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r0, 0x8, 0xc32, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, [], 0x1}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x35}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x40}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008090}, 0x4004091) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="a77e2ea7b47ffdd3d599b07ff74c2c3dbf3fa1f57c", 0x15, 0xc000, &(0x7f0000000140)={0x11, 0x7, r1, 0x1, 0x45, 0x6, @remote}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4804}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_IFALIASn={0x4}]}, 0x58}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000800)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x994e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x40800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', r6, 0x1, 0x7, 0x80000001, 0x400, {{0x23, 0x4, 0x1, 0x8, 0x8c, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @local, {[@end, @end, @ssrr={0x89, 0x1b, 0x31, [@empty, @local, @remote, @multicast2, @local, @loopback]}, @cipso={0x86, 0x45, 0x0, [{0x2, 0x12, "bcc00432acdb70bc4911f6066861e389"}, {0x6, 0x2}, {0x5, 0x12, "506197b2ceef02542de25594fad95048"}, {0x2, 0xb, "06c5577fcdfc0d1d40"}, {0x0, 0x8, "143e5802d9ab"}, {0x1, 0x4, "ad56"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x57, 0x1, 0x1, [{@rand_addr=0x64010101, 0x40}, {@remote, 0x7}]}]}}}}}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f0000003a40)=ANY=[@ANYBLOB="720208009e3f2ff2900fe55408d8a33438ad303895050b362feee6babf4e870d16f7eb9eccd741b4847942a425b7227201d99a7f00daea010e3e7c3b6baf5e5bd37ef40c798368fabca5ffffffff000000002a0cb2998b5c691479b01958c3eaa6d36af39f83ea63ec502bee35bb49343d0744757c3986ae44c37bac55ca37e4aeccfd3ec9c8a8ab01346a05927580baf4b3e9f765603f851e8df4fcac2f1d2997da40fd858dd101228c6a3317bda9311cd2f66b5fe1fb1044040631b2de3946abea8c1c699fa491dc7d829ebabf8de376ad3771c39bf76ba2ae273dbbe87b3609e4b900", @ANYRES16=r3, @ANYRES32=0x0], 0x770}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 21:20:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1396.938165][T26295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1397.020369][T26295] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1397.106035][T26297] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1397.178939][T26303] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1397.293033][T26298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1397.338775][T26306] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1397.409550][T26386] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 21:20:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:20:59 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x15, 0x6, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x81) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x400, 0x70bd29, 0x6, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000002c0), 0x4) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000300)=0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, 0xffffffffffffffff, 0x0, 0x100000001) 21:20:59 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x30, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000000940)=""/59, 0x3b}, {&(0x7f0000001b00)=""/4102, 0x1006}], 0x5}, 0x12180) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000001a40)={@fixed={[], 0x12}, 0x4, 0x20, 0x8000, 0x7f, 0x2, "e5d8e43a3924cb3f1d44f792f94c676c34ae1f64510c6a7e0002c5be831a50b18ee5fc037a2dcea50d450d3a03762d90c5979ea9e9e3733c41b2f7b5f653dc7f75fc6004f18e355d9f974b2d3668c6c4504506343e526462a7897a17c2689a21ecb2f2102ccbb5f4b4030c607c8c9fc717dfc9887f7aa4718f6b351ed403a9ec"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r4, 0xfffffbff, 0x28}, 0xc) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xffffffe1}, 0x20) connect$inet6(r5, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r5, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000180)='syzkaller1\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000048060000000000000001907864010100ac1408bb44140b01e0000001000000007f000001000000000600"/70], 0x46) 21:20:59 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x4}}, 0x80, 0x0}, 0x0) r0 = socket(0x1e, 0x5, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="c16a1135715532d5de7bca93d9cb4f68eb9f08377e37c3e67107a0202e9afed5d60aa86cb9d5d58d35", 0x29}, {&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000200)="9add6e6a0e7d4449604378ec61f920f71572401a8ed543e9526efa71a7bc1b6f3f4e895f66df411dd17f7e47e9ab18bfccf9fd73c7b4e4b009cc48809688261325bfcef0c607c25bffccf146607cd3e75adf7c937010028a204649cc310f92453636bd47851440e9ffe4e46f6056e419f35abb86f8bb", 0x76}, {&(0x7f0000000280)}], 0x4) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) 21:20:59 executing program 2: socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000000000c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x7, 0x8) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x800000000000c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r3) ioctl(r3, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x64}}, 0x0) 21:20:59 executing program 5: getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xde, "cacf954c2cf5b19ac8728edf2b01a561cb08c55ef8719164fe8be682e61969c97f247d38739ab02227e6726fc5cbdebfbb5f4c8ad49e1a5db8b5293093d284e0a1745890f17e3317298ad8cf9f201735310f1c922ca83cf4283bf96c20b03c8c20dc5f7a9344ea1d35d0cc13b233f0af7a935360832e0c714182dd34718899ab1cfc4ec3b78a56d6f5d6a14c823b375b678e7234b8968d27dbb231003ca7c54a1b66a876e8f09d9cea6df74822fec99c9650a2bd8d6fd49ec1ea3333a04f93f10f8caea7b8c40c04196c598c24c703ace540ec82d00f43b8511b347acc7c"}, &(0x7f00000004c0)=0xe6) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0x116) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2, 0x0, 0x1}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00', 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0xf28, 0xbd06, 0x0, 0x800, 0xff, 0x0, 0x6]}}}, {{@ipv6={@private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0x0, 0x0, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'ipvlan1\x00', 'veth1\x00', {}, {}, 0x0, 0xf, 0xf, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x8, 0x5, 0x7f, 0xfc4, @dev={0xfe, 0x80, [], 0x22}, @private0={0xfc, 0x0, [], 0x1}, @remote, [0xff, 0xff, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xff], 0x80, 0x120}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000000b1420002dbd7000fbdbdf250800010002000000080001000100000008000100020000000800010002000000080003a4b75ec7c19ace8b00010000000800030001000000"], 0x48}, 0x1, 0x0, 0x0, 0x8804}, 0x850) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@local}, @typed={0xf, 0x1d, 0x0, 0x0, @str='}}-\xd6]{&$!\x8f\x00'}]}, 0x34}, 0x1, 0xffffff7f0e000000}, 0x84) [ 1398.548381][T26406] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1398.573976][T26408] IPVS: ftp: loaded support on port[0] = 21 [ 1398.618639][T26408] lo speed is unknown, defaulting to 1000 [ 1398.677761][T26411] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 21:20:59 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x328, 0x0, 0x198, 0x0, 0x198, 0x198, 0x290, 0x290, 0x290, 0x290, 0x290, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "0b7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b865bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcde83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ffcfc1dc61f80", 0xfd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'macvlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r3}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000018c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r5, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@local}, @typed={0xf, 0x1d, 0x0, 0x0, @str='}}-\xd6]{&$!\x8f\x00'}]}, 0x34}, 0x1, 0xffffff7f0e000000}, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x400}, {0x0, 0x3}, 0x0, 0x0, 0x80000000000001}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, [], 0x2}, 0x8, 0x1, 0x0, 0xfc}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@broadcast, @in6=@mcast1, 0x4e22, 0x0, 0x4e24, 0x7, 0x2, 0xa0, 0x20, 0xee9cf55189054b7}, {0x2, 0xffffffffffffffc0, 0x3, 0xfffffffffffffe00, 0x401, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x7fffffff}, {0x0, 0xd6, 0x802, 0x5}, 0x1000, 0x6e6bb6, 0x2, 0x0, 0x2}, {{@in6=@ipv4={[], [], @broadcast}, 0x4d3}, 0x2, @in=@broadcast, 0x0, 0x4, 0x3, 0x6, 0x1, 0xffffff81, 0x8001}}, 0xe8) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0c00b78fa5d39ff31a00001608000180040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}, 0x3}, 0xe) [ 1398.829897][T26492] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 21:20:59 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01020000f0000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="b2944585efefcb2fd93ea8b2d1c7ad14c640668bea4e823ec5b4667873e4d259ca02092ceab4a0bb1c131b0c02ea1a10f53095978b7ee10dee0de3ca69210fb8c0a5e08d06ef1d23f624e64ec3c5799292602289d75ed4ec1507fc3529cbe4437a48b8f7bb2d4165b82017fb18ef23983052c484b82686625ef84fe9e36b350580fca17d1e47a2eadd4ffd12815651e88ad50e27b6b3c77b11cfd0441e31f5622c4961a13e79e654be4f1cb35581c032ab320d52637bf374b5a666c9875ca6d50bfc827d0f7de910ef2966cba700c93247f05744ed35ee9ce4269f4f4bce47b4193a2676401ab800dc6e1013ada4db49259fd7255920fa0d5d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="020326bd7000fedbdf250300000008000c000400000005002100010000000800090003000000050007000300000008001900ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x89180}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020840}, 0x48000) sendfile(r5, r4, 0x0, 0x100000001) mmap$xdp(&(0x7f0000677000/0x2000)=nil, 0x2000, 0x0, 0x100010, r3, 0x80000000) 21:21:00 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7f}]}, 0x10) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000001c0)=""/152, 0x10000, 0x0, 0x7fff, 0x1}, 0x20) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1399.292557][ T27] audit: type=1804 audit(1598995260.277:1366): pid=26520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1568/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 21:21:00 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a010000000000000000a8367c4b000900010073797a3bba7c9041fdc0f800120a01020408a619ee612158e80300000400048000020002000000000000000900010095797a3000000000640403400000000100825e4732153016d7ff0932a63201a3cb0dc46c9c39e5b188816fbe4dd5c5b5a835d450cff0e22ac5f046b4dc7220079b02b5ca61e7ded786e5b81247c4d4dd41ee7d5ecf377f39be1b9f4a35cabdb4ec200e91c7d99156ea73b259eb715b7fa4cf"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2801e, r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000380)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000001) 21:21:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x20040045) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x204}, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) splice(r0, &(0x7f0000000180)=0x9, r2, &(0x7f0000000200)=0x6, 0x0, 0x8) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) recvfrom$l2tp(r1, &(0x7f0000000300)=""/161, 0xa1, 0x101, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) 21:21:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @dev}, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@random="833695d1b54d", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x1e, 0x3, 0x0, 0x0, "f32ef5a60c516ade895990e9a33930a0167b9aebb2775bfc6add6ba93030c85d628e649fc915314c3457c0903478ae5c7955aba5a157d442235aa08d80b2016f"}}}}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000500)="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", 0x1000) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bind$packet(r2, &(0x7f0000000300)={0x11, 0x10, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x9, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ip={@private=0xa010100, @local, 0xff, 0xff000000, 'geneve1\x00', 'veth0\x00', {}, {0xff}, 0x5c, 0x3, 0x40}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x40, 0x0, 0x0, 0x7fff, 0x1ff, 0x0, 0xfffffffe]}}}, {{@uncond, 0x0, 0x208, 0x268, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x1, 0x2, 0x2}}, @common=@inet=@sctp={{0x148, 'sctp\x00'}, {[0x4e20, 0x4e22], [0x4e22, 0x4e23], [0x8, 0xfffffffd, 0xffffff7f, 0x3, 0x7e, 0x4, 0x1, 0x100, 0x7, 0x400, 0x6, 0x9, 0x3ff, 0x5, 0x3f, 0x1f, 0xfffffffb, 0x260, 0x4, 0x6945, 0x9, 0x200, 0x7, 0x3, 0x3, 0xae, 0xde81, 0x80000000, 0x0, 0x8000, 0x10001, 0x6, 0x0, 0x7f, 0x7fff, 0xff, 0x400, 0x3, 0x7, 0xce, 0x8, 0x4, 0x101, 0x5, 0x3, 0x7, 0x6, 0x6, 0x6, 0x8001, 0xfe000000, 0x52f36212, 0x7, 0xffffffff, 0x0, 0x3, 0x0, 0x9, 0xe71, 0x0, 0x40, 0x8, 0x8001, 0x9], 0x6, [{0xff, 0x9, 0x7f}, {0x9, 0x80, 0x5}, {0x81, 0x5, 0x4}, {0x81, 0xf8, 0x2}], 0x1, 0x2, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x32}, 0x8001, 0x0, [0xc, 0x12, 0x39, 0x37, 0x20, 0x8, 0xe, 0x5, 0x34, 0x10, 0x6, 0x13, 0x30, 0x7, 0xd, 0x19], 0x0, 0x7ff, 0x300000000}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000080ffffffff00"/20], 0x14}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x42, r7, &(0x7f00000010c0)=0x1, 0x7f, 0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r5, 0x29, 0x7, 0x3f, 0x2, 0x40, @ipv4={[], [], @empty}, @remote, 0x40, 0x10, 0x0, 0x100}}) [ 1400.183702][ T27] audit: type=1804 audit(1598995261.167:1367): pid=26548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/879/cgroup.controllers" dev="sda1" ino=16366 res=1 errno=0 [ 1400.251436][T26555] x_tables: duplicate underflow at hook 3 [ 1400.362504][T26562] x_tables: duplicate underflow at hook 3 [ 1400.712042][ T27] audit: type=1804 audit(1598995261.697:1368): pid=26547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1569/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1400.785621][ T27] audit: type=1804 audit(1598995261.697:1369): pid=26549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1569/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1401.038002][ T27] audit: type=1804 audit(1598995262.017:1370): pid=26569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1569/cgroup.controllers" dev="sda1" ino=16378 res=1 errno=0 [ 1401.398564][ T114] tipc: TX() has been purged, node left! 21:21:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x7, 0xfff9}, 0x90) write(r0, &(0x7f0000000000)="2000000012005ff3fdb2e933004aa000800200"/32, 0x20) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r2, 0xd29, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x106}}, {0x8}}]}, 0x70}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x55}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x10004051}, 0xc4) 21:21:02 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @dev}, 0xc) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@random="833695d1b54d", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x1e, 0x3, 0x0, 0x0, "f32ef5a60c516ade895990e9a33930a0167b9aebb2775bfc6add6ba93030c85d628e649fc915314c3457c0903478ae5c7955aba5a157d442235aa08d80b2016f"}}}}, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000500)="513f1601c0fd308db97bf12e21268ca6a607da793e16db97134aa1f3ce24aff8c33ccd0787ce128306146b23082189c1388e63a0bfc2efda04b5b8fde0e0395e445ca92ec28f4628d31c87f6edf8d2ae94e2b9f3265320bbeec65eaebc00c50f3b81acfc16bce0f0d6bc92b139b6c0e1107203cd90908689ff212a0be2aeda01d58fe590347bf168b2526e37fdb8780287f9137c5acb6177fd10f6b5273cb58eb9d2e187cf429b958e62472e57ffd65c398bc61c95fb03c2f695cda92fce91b170bc6651ed051554ec72852c1c7c45ea57a24a2cf4c53fa5956f1e4fc18539a702af9624dab7af797e2704addec0fa93f3602f9465cb40726d0d827941371895e018d6fe956cac6d35feec2ef1637972f0c44f2aac527a19ef7ec984ef97b823c08cbc215c621dd1edf5366bd2f9fd45bf0d487d87768e0eb127683e8ebe63a807a289616711d503d92b1e6ca1cf87b65c6c3b4014827f52cab6263906125ac94ca928e09dca0d64dfdf16e13b10d95d778700332d922cc5eb118c5390c010c7ac7c2540f1bdbc0776f99da729546d95c7eb6fab9b4d68cb7019dee6983c100296ee4421c5935a3d458b5e48d53ef1f52f2595e18fdc8f9198def83a9c192a9a23799ee8901c7c0226e04e88c38e5b04fd63cdaf47ef80a244db22d1ee3d887ccd0fac56470c86c9a6ebb082d91e468736291ad5761b615b6416a66137c7daae15336bb655200c1eb023c9631bef1b62f2f817334ee34ce7fb4533c5eee6fed2202ecfb9a5b066165060332c841677a49e69db3552c4c30e5ca96cbcfc2dd1bc00373d0e143834e1ed2961c1dd568e4500e465de1e97696fd8d522267c4374d8f6736dfc3d450f38cdbbe4486093b901d1262366f6786120af80d2e505ea089d99448f88023f1632da563495741a8248550f1ce503e197c1bc2ef67d8863b2b2f1701a323ae1763ce8f810ccde6beaa5e54fe16b75e64f4904a3391a489b4d2d77dc22ac9d70cc654d2b9032f05dfa3b0d26472e7817a67b2450ec30379e8f3193e2f4012a395733f5b2131f8967401075e18b0621a88384da9da1d7be8fadff5918b0e91811b1efbeab45fe600e23133adb5001b159e302b37dcdf931aca08c1e594a04396337395a80714f4133d155746a5bc47fe556fc866faff4b1bebe7953348eb6ec023e423561574b7df7c1c51c30cca3da54aba1ee6fa3a2f8f5eb6f5ed6e3fa4acb049e6dc5031489f6b6649c469d194fb75efeb79740d4df18b67a8d8d477fc914494f16e5eca5df0330c7abe2c217fe914ec7594295c253d8c289eade7183f6d8e570eddb9b974d0f1a0f1e2db02fb4b93440f20f3116de3934364f0d2f7e36824a2e281b84752a22f8c5b5780f503ec936b777da7e20f30124a7b7326639eb351f1c74c1f81684a533561c038e8f4e9304c74dd398ab5c9a69d6feba02509a7ce6c80f38e57616b085dc25eef940c5a7a249ceb7e6e1178ba8468dd8c4e11e2e5c09e3020691878db09eefeb0891f3ba067c157c52608dcab09f6520c1a2d005aefde736f18913f745f5a26e0a04d24e5da359dcc28e1257a5d7f988e622c3e6735bc5b8d2bf921457dd68750a32dd97b3ffe3a18af1fb88c8d7936cff43cab6ceaf5feac3c5ea56bc54e369c29a438d22a6f882a2e9d2b1bf30ffe8f0d64f32733bf1bb047219e21dc26e4fbd901b6047bd450f0118dbc2e710838b29ed74c3f201fbd75791aa973a055c727426f698a3f9affa018a5f33bf920a4400128f54fb100eab6ff33b76497ab6d3176a1a83f7dc4b6b3f8079375724c63735c871c4cfedc05d9f7716463f4f25df267737eac5eb6c49522e1263ddfcb9489b97b1920df0745fead73e12c6b56dd4073df9c4a9815ad0323e2f16be4481e4ec33ca4bedfb2e299cdbc7cdda2680f027e24b5489899a890db019c1f79f0e53572216833e1c4e9eda239c356ae0b34a8a987ca6e927d993b1046b32a07637b279439515d00d8055f0cc25ccdd3d41ee307e2820b2541e0ede7483a9d01089721faf9c82cf58074fcd1fe09376dc60cc8bca2bfad461ab955efc6804517b99524a075c1ffeb58349248b0e9226845620a478a5d2c1a9983bab37aa6011c893a4f13e3b40e7b9df9ba0e08d90fb6a74cc5cfea4de1b5553a36ec2ccfdff345928560e42fff4e4b7e6038c90934775517766ea82a504c2fcf1747db14b7c8e5d555d5dfa8118ed06f0be7d500b289274c898d960e74a85caf380ded863b97de8d40df37218e01e4252e6b7e3626ddb480f733ac7cf133acec7d5f87631a3d9e18241c25f321d99c27f0024619e9e1d8e08941dcab8cd0cd43580f2af457cf7b8772ba8c6d8b0cc29df2438911cd190613f436dfd9b91e68ad2b57e96d56b435d02910184d61d9a8a1098f26cc99e737e9376f1fdfa252834c9dedf76866a6f6547ee4eb09e56991a7e54f011c0e2baf1a384289e0f1fe2560e3b1f13d769baf156636e2f738221935c00968d66b5f431553e35cb5de6e03b818472914dc0fa5265a3ab3017190d11571588a4e9c06e8316b9726e8abd3af4b9fede4f78a4ca017a64daad75a6009954831e14eb51d900d17c54f69d7bc7e8077b1eb0109e33d775db282d5cf8583039e7bb5421dd7050003e28766af42b8a81d360ef3b8634127ed8e5ff97bcd3986e3eeb3fb680c9b807fa78ac241d8ae215ad12873e9b5765299f45afd7a8426cbf0dbe0476fae9ccc0b5246c70590a9c5b1d534f4f6152754d730eb8eb97c00f27ae7c4b71fbeb3385e5dd560d60b82398c0b2b36368acc7d6b58c753b1773c60fed7b15e1661db9efdf6af599c52f2ccb82bf23b236196c6ae6193d6f1d9f3847da60ecf114aba822d48c8fe1c7a12f72d1833f5e773e675005dbb79ab6ed3009a16506082a21c6dd30cfa60479c5a26f547e8cf66559c0ce1e15916d40408318450d7076fdfbeba6f30aad6f1f3f3b458b2d7f25b4e47ef20fb795de565a6388e808aeab7b12ff33737f0649b24bfb9ffcb3b854563798a70e81276b4fac118d0e64f436b1d8ab79685a8a0359b9c40debef37bb45dd1e1665f4fac412247ba092fe1db0d11020fd03002df95c7335ec9de522bef4e3bdd9b3283d4d8f9c5d831301b5bd2aa961e9883adecb266587e41f24aeef4adc6e7447450f74a7223723bc22505181f7b45bf37f454248eba946019dc091d91f95e598a643a666ee0e500414dcf4439759b0d8e4b5cf56a771edc57136583472ae3a245963ad7b52b1c8653d4dded1f6d2dd4202d5dcc3eab70ee918eb71789068b52ce16efd9e9343f660653e6fb156fc44f6bc24b14f974ebe3859e4da30ee514f15227d3090b29b3cdb1994341ae53abd27db157bbe92dce8fb7a556ea6cd78a3dfa4962056c3a31127a19d79c2da4e511a7d0be4a54366106c5edc9801b252105415d03104f30e472c00db899546af9b6b5b92758cfb2cf6be430ebbe4a985fb25305c25528dac1da7f107002e45e3fb012a923178191e31e3023d3cf13c283ace88d19a9ebed4c6d05eda2eb903e469edf46a2cfe8937e5354460eca8e62154a1a357ee85b4aab6050613bb7aa5df4a0a04169db0034a2ca453633d47b8e5cdbe91d04c8f65cf206a11e3314468f894177a67c3659fea727a18a1b58a99cc876ab83eec508af9a58afefa518f327f4820227b332ccb5ec6b6831874891dc1e35e342c425087df291f254bf985d91126dba40445d1c0256cc01a770b7382363f98de75cb69ef9b7e4d028280906daba87286a910e5f933f78fb49703d383a86c66abea4c25295cab1dddd4da94ec59461a0285ef703f389975ab268f6d1338be530039e8cff08414fe6dee89cee3dcf97b2c7a0f704d2da8d060465d37c7edf27c2995e1de8aa62d95d838ee149db69194588c2b5463ccbfb6081a1f0cd7194a5ee7b97d50792acae453f532fdc8e42454ce9db461baa0489c27c4089f387e92724752a5390e865d2e5a118ee7a9a16e079d5df6b2174aee4418012d0eb2dd40d926ef0ee69dc2a694cb6a22ad3ff4c006affa87d8f9d0fb424b90d370241718ef63c8e1223b1c62db92785b0be3cd9ac8140482eac275a49b557d7f6b3313357f3e51809782888aaa0df84902455f78426dba39b621fd84963973fa10f922d889e08347a329ef945cce24485acfc79f288b5d39e374e7950401b704c9e53c6e69983215a20c7b13b209e04175a8d15f99687cf87bacd9808e54dc94574787bc9d124cd1d3135f55496ed908378518076f880d3b24449a128b72713aa167ae0aa76589901e62abf8c09191b065bb7285a5f05d45787c6fe90df20fd9db82c40954b1f4ef420dd84839a328f24d833480bd0579cbbf583f6a606b9602cb0fe36ff6d938fcb586dd1b4d1f47ba30f31cca344353ed971e82f8ebf5b81208ce9396645e9d803b82b0d60156060b784f6f221d060079e46d68c0b63ed0bf14f0b08c2b986194e8b9e2e0b67e87c1e864c72bb0e602b61f81f403a34bc383e2cecdca30805a0ac3b0c68883908a022c904242fb0414af1201f0a6187542ae661bb326d454ceaec1c29d07ba4ffb3cddda0b18126edd03d5c7793c2d2a1554c3abe7693e0f34e6e7162a278210d46c0103effa42462232ca070bef09e171ac8be0f17fb35ad5336481efb8ef5f4c0527faaec90c2c54facf56fc20a4e621ffc49e7ac585dfd92d36fd916e56fb7cddbdb87b3f36cfc0643d6fb6a9a87f015fb93a75b0a953e657556585d542985aaba081a078c882048c5f81469424683f53914a3d7ab2edc0a466c2e8674ce027b5dbecf2e8650212ff3adcca4cfec65ea643f7e2e2696fac3a876bcb961ac7cdb769b55fb82a888e14ab32a827f9b7ab9574c5a4a1529ff4e854e22889ce0d6e70c2d78fd4792b07320494ab09d31363fb2744a831a6c3e637eb2e64cb3991d04d9234b67b3bd8d6b8713667395c37cf6770f10f8a5664ee74865e52234926741799232329d7f848eb07e59bc160f50be46524dc79dbc58dc55bba9b68bd2e2acb7c537f1a0b1093b8a74c16f4baa76415ea636917613e41f6074b6aaf2a842896a795fe142e02d754d90f7e1fc23290d4244474185182a094789dc40017828839e5d241e539b78e0b9bf0781147b4d3fb124e8b47dd521322ef0b790625b518a50f04cfe36b0f333921d6abf5595bb90337a0f6479959f1540c132404f026b8ab297777a0e7e23a6b92c6d62b02b1ca98c74c2555916284439a894ef5464071dc899090d8e4a58c8c06d7db137e8720773e566df33217ab43b4b46aad60da1edc4b9666c538a73ccba453ef1b0a0951e53e43c1e1149c6cbe7153171db7e3f8b8cb381cbf71581b0ef67b62f66f0ca956e666ed54aa31030b9bce6d1f51ebf83775a867d77ef075a0c74c61b3ddffdc90e7307a546ed9be557b4553d044b5e342f0f67b7b863f4217be808798da3fd9eb428efe3c2363e8bf6b03360030969f92d7143eb75f73b46b9b848ccee1892e1419d652f43f0eeaf38d8ba9687094b9faf6c0189874314ce379eb2c1ded47b4dd4389ca55c3453c6937b24402f1d63976bbb3df2d165abe2fc4c3bccc84f18672e69e2821f3cd3990d1189c19c45c5c6b1968c4edd896eee4c5e11d725d86940327c70b43c6a549f34eee3e28f4a53cfc64303ed3f54516e6207f006973bf8062d32e79cf34e4e1c33670ea09e3d7c0ba9a9dfbeb6aa2b018f1197b10d563796c7e6fd96e5e65416ff11e043103dd7c6c2e753a6780b263079f47d84132b5e61f7b1d", 0x1000) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bind$packet(r2, &(0x7f0000000300)={0x11, 0x10, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x9, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ip={@private=0xa010100, @local, 0xff, 0xff000000, 'geneve1\x00', 'veth0\x00', {}, {0xff}, 0x5c, 0x3, 0x40}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x40, 0x0, 0x0, 0x7fff, 0x1ff, 0x0, 0xfffffffe]}}}, {{@uncond, 0x0, 0x208, 0x268, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x1, 0x2, 0x2}}, @common=@inet=@sctp={{0x148, 'sctp\x00'}, {[0x4e20, 0x4e22], [0x4e22, 0x4e23], [0x8, 0xfffffffd, 0xffffff7f, 0x3, 0x7e, 0x4, 0x1, 0x100, 0x7, 0x400, 0x6, 0x9, 0x3ff, 0x5, 0x3f, 0x1f, 0xfffffffb, 0x260, 0x4, 0x6945, 0x9, 0x200, 0x7, 0x3, 0x3, 0xae, 0xde81, 0x80000000, 0x0, 0x8000, 0x10001, 0x6, 0x0, 0x7f, 0x7fff, 0xff, 0x400, 0x3, 0x7, 0xce, 0x8, 0x4, 0x101, 0x5, 0x3, 0x7, 0x6, 0x6, 0x6, 0x8001, 0xfe000000, 0x52f36212, 0x7, 0xffffffff, 0x0, 0x3, 0x0, 0x9, 0xe71, 0x0, 0x40, 0x8, 0x8001, 0x9], 0x6, [{0xff, 0x9, 0x7f}, {0x9, 0x80, 0x5}, {0x81, 0x5, 0x4}, {0x81, 0xf8, 0x2}], 0x1, 0x2, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x32}, 0x8001, 0x0, [0xc, 0x12, 0x39, 0x37, 0x20, 0x8, 0xe, 0x5, 0x34, 0x10, 0x6, 0x13, 0x30, 0x7, 0xd, 0x19], 0x0, 0x7ff, 0x300000000}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000080ffffffff00"/20], 0x14}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x42, r7, &(0x7f00000010c0)=0x1, 0x7f, 0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r5, 0x29, 0x7, 0x3f, 0x2, 0x40, @ipv4={[], [], @empty}, @remote, 0x40, 0x10, 0x0, 0x100}}) 21:21:02 executing program 2: socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000000000c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x7, 0x8) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x800000000000c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r3) ioctl(r3, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x64}}, 0x0) 21:21:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="02000000000000000000010000000800020000000000"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb9e}]}, 0x44}, 0x1, 0x0, 0x0, 0x3004d840}, 0x4) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0800f1fe6682eafaac0674bff42d05c4eed7d2a5b4c03a9256ae8d70779197cdbdddac04524ef538033d07327a8da30700000000000000df4a8edfbb82f94f68ce5142f1926a995de14864eef4314a3c4a5d7e6351cd616d219740df023abb37f0a46f38aa095df2ddc23d9f9ea1646ebd0933a2579b471771afdf0f5ea0147838c1fc2e41d412ceabb357037d0748aa"], 0x30}}, 0x0) 21:21:02 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xde69f6e9ca5a45a3}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0xc3c60be5bd41d945, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1402.093409][T26584] x_tables: duplicate underflow at hook 3 21:21:03 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x8}, 0x5c) socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 1402.192610][ T27] audit: type=1804 audit(1598995263.177:1371): pid=26593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1570/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 21:21:03 executing program 0: ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000200)={0x7, 0x499}) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x44b83, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x5c, 0xa}]}, {0x0, [0x2e, 0x5f, 0x20ab5ab7a2a0407a, 0x30, 0x5f, 0x2e]}}, &(0x7f0000004600)=""/210, 0x30, 0xd2, 0x8}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={0xffffffffffffffff, 0x0, 0x73, 0x1000, &(0x7f00000002c0)="ddf06e3a81e56348a232aa8c4dba1224482f502d58a56510bbb598ab3c105f59636ac8e9428df89e4a8d8e3bbc9a70eae869c3dd859e08f8165b2e4619dd21904967edd53eaa127c0bebb5d90a5a91216b66f0f98b86f7cd254d9b640c31d99b41092363d0cadf7ba1f8810b5d016b47a2f27f", &(0x7f0000000340)=""/4096, 0x7c, 0x0, 0x17, 0x9d, &(0x7f0000000240)="66d262226c949b39ca783a4ec9a664b600096bac6a157c", &(0x7f0000001340)="e35f0d25a289f167d0f84e42cafd6174c852090ed6752ca70f51d2b7c3752c840c861b6bfa45aa2e425fae16e4de86ab360c2ae76f483e23511c0f9bb75707b09e2c9e3ae3b4b74a10f09a7d743f1889fc021c8ead5a57c2e9ac2b0834db31e9a53ed8518faee92f226ad827e6f466ecd710f98d958a905b13cfd8a0c402b59b9fea197ac5ba3de59da2f2fa76a910f5ceaaa09442a740926d7c8148da"}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x11000000) r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x50) [ 1402.484568][T26608] IPVS: ftp: loaded support on port[0] = 21 [ 1402.504047][T26610] BPF:[1] Invalid name_offset:16 [ 1402.563089][ T27] audit: type=1804 audit(1598995263.547:1372): pid=26598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1570/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1402.616990][T26610] BPF:[1] Invalid name_offset:16 21:21:03 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000400000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = accept(r1, &(0x7f0000000180)=@nl=@unspec, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0xffffff80, &(0x7f0000000200)=""/1, &(0x7f0000000280)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 1402.661147][T26608] lo speed is unknown, defaulting to 1000 21:21:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a000200", @ANYRES32=r4, @ANYBLOB="14000100fe8000004e324901000000000000000014000200fe"], 0x40}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0xffff, r4}}, 0x20}}, 0x0) [ 1402.750766][ T27] audit: type=1804 audit(1598995263.547:1373): pid=26593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1570/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1403.013252][ T27] audit: type=1804 audit(1598995263.997:1374): pid=26642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1571/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 21:21:04 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)="93e419017fe350abbe16f7d42b36f158dc491d54d8e2", 0x16}], 0x1}, 0x0) bind$can_raw(r0, &(0x7f0000002040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) socket$bt_bnep(0x1f, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) socket$netlink(0x10, 0x3, 0x9) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000600)=""/23, 0x17}], 0x6, &(0x7f00000006c0)=""/120, 0x78}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="890000001fff989959a9907dd6b97b862f3ea4020a934f8345e8fcb78874e32b1ac18223568a7926a204c1d8bd59e33f8f1d183f8d176aad2b6710b44465b9eea813f76100daa42ded49b3806f6e7a9ce7455a706776ffe8a89e8c665aa1e133f3e7d8990612aba6c41a103d915d63581a7cb6f8cacd57f17ab00716185ff28fe5f86cfafa56"], &(0x7f0000000040)=0x91) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={r6, 0xff}, &(0x7f00000001c0)=0x8) setsockopt(r0, 0x65, 0x1, 0x0, 0x0) 21:21:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170000000b0000000000010000001400020077673200000300000000130000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20180000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x9c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40d6dc85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e35d6f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2e0d4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x374b3626}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37b7ebb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51ba7cb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ce09cef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x194, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24000000}, 0x4804) [ 1403.207112][ T27] audit: type=1804 audit(1598995264.187:1375): pid=26642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1571/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 [ 1403.349912][ T27] audit: type=1804 audit(1598995264.187:1376): pid=26632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1571/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 21:21:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:06 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x4084}, 0x10880) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:21:06 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 21:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170000000b0000000000010000001400020077673200000300000000130000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20180000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x9c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40d6dc85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e35d6f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2e0d4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x374b3626}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37b7ebb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51ba7cb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ce09cef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x194, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24000000}, 0x4804) 21:21:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f00000012c0)=0xe8) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x7f240e554b9f90c7}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=@ipv6_newroute={0x44, 0x18, 0x400, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x7, 0x0, 0x3, 0x0, 0x6, 0xa00}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1f, 0x6}}, @RTA_UID={0x8, 0x19, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x50) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001140)={'geneve1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}) 21:21:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @loopback, 0x7}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="87bbc795", @ANYRES16=r1, @ANYBLOB="00002bbd7000fddbdf250ae5ffff070004000c00f900ff0200000000000000000000000000010c00018000000900bd6120a900060008000000000000000000000000f30000036f839ae5b926e263523f780904a330d87fa9c224754e3321c1c1df84cd729cf5a75ae415cef2fffbce06263b8df9d78ba505012d1f05958f3c5be3ad880a8c8fcced964f73f08d2df8007d0b1b4c8c2d37255fc736a255b2a2bf1c1596435cede1eda622f6b5e169647e67b283d1b7779e19330a734f945ea0b941e035b9338095f7ea052e90f2ef36de17a0c5eed2f895dc56f688eadcb52e21b41c60847ae0d0828f7005fc8d"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000fd1f6f4a4da865451b227a7e2eba56241f3ffcf62f99ef621e8377ff70e91ee009e2a179c3dd946880fa6c43f8044f6b0b2eb8055d8db9a8499e38db6177217cc37dca2df02d2221461886a9ef339c197ed1d762e8aa64f1d1f5fee3fb7d63a6deaf1a3b36da51980f6fc30d3a312147eb8b19d7ee600ccba601dd4ea1aa", @ANYRES16=r1, @ANYBLOB="000227bd7000fbdbdf01000000000c0000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000044) r2 = socket(0x1000000010, 0x5, 0xffffff1e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r5, 0x4}, &(0x7f0000000380)=0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0) [ 1405.305414][ T114] tipc: TX() has been purged, node left! 21:21:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000006240)={0x14, r5, 0x205, 0x4, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x104}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b500000000000000001004"], 0x3}, 0x1, 0x0, 0x0, 0x44891}, 0x4000080) sendfile(r2, r1, 0x0, 0x100000001) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1001000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) [ 1405.505017][T26684] IPVS: ftp: loaded support on port[0] = 21 [ 1405.533754][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1405.533770][ T27] audit: type=1804 audit(1598995266.517:1378): pid=26687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1239/cgroup.controllers" dev="sda1" ino=16156 res=1 errno=0 [ 1405.662520][T26684] lo speed is unknown, defaulting to 1000 [ 1405.704539][ T27] audit: type=1804 audit(1598995266.587:1379): pid=26685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1572/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 21:21:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010003b0e470101000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="200012800b0001006970366772650000100002800400120006000e0003000000"], 0x48}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f00000001c0)=""/64, 0x40}], 0x4, &(0x7f00000003c0)=""/77, 0x4d}, 0x40000040) [ 1405.917319][ T27] audit: type=1804 audit(1598995266.807:1380): pid=26697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir728013939/syzkaller.abOHeY/882/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 21:21:07 executing program 2: unshare(0x40000000) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x3c) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="f9ffffff00000000001000000000000000000000000000009a14d5df00000000bd1a8e6aa617d9e9409f"]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 21:21:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013700000000000000d2000000", @ANYRES32=r4], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x3f, 0x1f35, 0x1c, @loopback, @private2, 0x7800, 0x20, 0x20, 0x401}}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r6, 0x390c179b360adb45}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xcc, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x14, 0xf8, 0xfd, 0x3, 0xc8, 0x9, 0x3100}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507bf00"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x38}}, 0x0) [ 1406.080445][ T27] audit: type=1804 audit(1598995267.017:1381): pid=26691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1572/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 21:21:07 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = accept4$bt_l2cap(r0, &(0x7f0000001480)={0x1f, 0x0, @fixed}, &(0x7f00000014c0)=0xe, 0x81000) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000001500)=0x10000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) unshare(0x40000000) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x3c) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)}) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000001) 21:21:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000000)="760410246b204b73042fe167ee1925b2129a366fcbf8c77b57cec8ef8345503d1f62f281deee45ad94545f082a644dad121e521202b8575757e08f7f64600e5dd00088cb2d230ceb4fcffa4ae8d18f2a853e1931fa4fe6d52efddd3e617f3a3c214734145345d5def9e212c25bfed4", 0x6f) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x130, 0x130, 0x0, 0x130, 0x130, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x20, 0x2, 0x0, 0x0, 0x0, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfe78) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x130, 0x130, 0x0, 0x130, 0x130, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x20, 0x2, 0x0, 0x0, 0x0, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfe78) [ 1406.242287][T26727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1406.251536][ T27] audit: type=1804 audit(1598995267.037:1382): pid=26685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1572/cgroup.controllers" dev="sda1" ino=16384 res=1 errno=0 [ 1406.355392][T26732] IPVS: ftp: loaded support on port[0] = 21 [ 1406.398340][T26731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1406.429314][T26684] IPVS: ftp: loaded support on port[0] = 21 [ 1406.456881][ T27] audit: type=1804 audit(1598995267.437:1383): pid=26736 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1573/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 1406.505098][T26732] lo speed is unknown, defaulting to 1000 [ 1406.515109][T26736] IPVS: ftp: loaded support on port[0] = 21 [ 1406.614285][T26684] lo speed is unknown, defaulting to 1000 [ 1406.680531][T26736] lo speed is unknown, defaulting to 1000 [ 1407.157333][T26732] IPVS: ftp: loaded support on port[0] = 21 [ 1407.233774][T26732] lo speed is unknown, defaulting to 1000 [ 1407.419877][ T27] audit: type=1804 audit(1598995268.407:1384): pid=26736 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1573/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 1407.483259][T26736] IPVS: ftp: loaded support on port[0] = 21 [ 1407.547764][ T27] audit: type=1804 audit(1598995268.437:1385): pid=26843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1573/cgroup.controllers" dev="sda1" ino=16370 res=1 errno=0 [ 1407.592736][T26736] lo speed is unknown, defaulting to 1000 21:21:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0xe5, "b0029e41f25f34a4bebf282d2b034ee63510e265aca93b475a0ce31620d24bc1fa6824cae164fec83188b647c60173d30a9eb3128a64bd664577863092b6d6892f766ec9239560fb4a72ca9c1abf58d30477e648243caba4379bff92b61d99d344133090c6645fb403abbe6f0cb2efb928a6fd58a38b0768d74fdf59c9cd21ff815c17922364c35774f2a395ab32812b4d2af733ec055c0476b83594c78241dde0c4872216c39a6e3850c1f5256f779bd73a54ce1b12567e24fab51b8c8097302953f73d80aa746f542f823f8373ea4fb2acd55b89ed48d860853cbb02a75a7ebd75afe400"}, &(0x7f0000000340)=0xed) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x2, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x4, @none, 0xca64, 0x1}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a000bdeb183869930e307c6d22d33efb2956b77587b2ecf8c9094b830a84452682992c8bf8fafcdd6946e9307a6c906b5584bc739e397201a11c7a236fd1242f1fcc9b47bfd76946da8e115d618cfa78d11d2464a07b5b3d7986675f4eb8556982ea424950fb0ec6fd8ece9d9b4a78f655aa26e9bd848c3d747c1af97cea4edfe92892d023e8db9a919d62b0bd6515baa1e3bb2d9f73a862a357faad15611b876ae", @ANYRES16=r7], 0x4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 21:21:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000000)="760410246b204b73042fe167ee1925b2129a366fcbf8c77b57cec8ef8345503d1f62f281deee45ad94545f082a644dad121e521202b8575757e08f7f64600e5dd00088cb2d230ceb4fcffa4ae8d18f2a853e1931fa4fe6d52efddd3e617f3a3c214734145345d5def9e212c25bfed4", 0x6f) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x130, 0x130, 0x0, 0x130, 0x130, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x20, 0x2, 0x0, 0x0, 0x0, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfe78) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x130, 0x130, 0x0, 0x130, 0x130, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x20, 0x2, 0x0, 0x0, 0x0, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfe78) 21:21:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000002400400000060bc7d9400542c00fc010000000000000000000000000000ff02000000000000000000000000008d18d0f30000671a6fd1d600000000000000c48fd2ac380df09b536912504ac32029021d0aa63d17abd8d6ea6a5873cd685a3694a439eb84046432494810bfc3208a7200379c5aefe6eab2e446c48c44184230cf014d4c1c39e2461c578e185bc7f19b09e597cb8691"], 0x86) 21:21:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffffffd) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r5, r0, 0x0, 0x7) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 21:21:10 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073000038000000120a0102000000400000000000000000040004800900ff0000000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x3) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x5}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f00000001c0)='./file0\x00', r5}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r4}, 0x31af, 0x9, 0x5}) [ 1409.176720][ T27] audit: type=1804 audit(1598995270.148:1386): pid=26896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1574/cgroup.controllers" dev="sda1" ino=16376 res=1 errno=0 21:21:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 1409.349521][ T27] audit: type=1804 audit(1598995270.228:1387): pid=26891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1401/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 21:21:10 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a010000000000000000000000000009000100737965300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x198, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004}, 0xc0040d0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 21:21:10 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x29, 0x7, 0x1f, 0x1, 0x1, @private0={0xfc, 0x0, [], 0x1}, @local, 0x40, 0x10, 0x8, 0xfff}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}]}}]}, 0x148}}, 0x0) 21:21:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x103, 0x9, 0x3}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) close(r0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000000c0)={0x92d, 0x401}) [ 1409.974029][T26921] IPVS: ftp: loaded support on port[0] = 21 21:21:11 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f0000000180)=0x10, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 1410.187549][T26921] lo speed is unknown, defaulting to 1000 21:21:11 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x2, 'vlan0\x00', {0xbc67376}, 0x7fff}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000140)={0x9, 0x4, 0xdc, 0x11e7b474, 0x0, 0x101, 0x7ff, 0xffffffff00000000}, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0x8, 0x4, 0x5, 0x10000, 0x7fffffff, 0x5}, &(0x7f00000001c0)={0xfffffffffffffffd, 0x7f, 0x3, 0x2, 0x3, 0x4af54c7e, 0x9, 0xffffffffffffff95}, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000100000000000000", @ANYRES32=0x0, @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) [ 1410.734895][T26944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1410.775205][T26947] IPVS: ftp: loaded support on port[0] = 21 [ 1410.851431][ T114] tipc: TX() has been purged, node left! [ 1410.892073][ T114] tipc: TX() has been purged, node left! [ 1410.925848][ T114] tipc: TX() has been purged, node left! [ 1410.934445][T26944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1410.960583][ T114] tipc: TX() has been purged, node left! [ 1410.986761][ T114] tipc: TX() has been purged, node left! [ 1411.015604][ T114] tipc: TX() has been purged, node left! [ 1411.016805][T26947] lo speed is unknown, defaulting to 1000 21:21:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 21:21:13 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x1010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1411, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x815) 21:21:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 21:21:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 21:21:13 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000240)=0x8) [ 1412.370908][T27019] IPVS: ftp: loaded support on port[0] = 21 [ 1412.435777][T27018] tap0: tun_chr_ioctl cmd 1074025675 [ 1412.447792][T27018] tap0: persist disabled [ 1412.473567][T27019] lo speed is unknown, defaulting to 1000 21:21:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1412.662202][T27023] tap0: tun_chr_ioctl cmd 1074025675 [ 1412.668541][T27023] tap0: persist disabled 21:21:13 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0xf, 0x4f, 0x6, 0x40, @private2, @local, 0x1, 0x8000, 0x7, 0x80}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000380)={0x80000000}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040004) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x31) listen(r0, 0x400000001ffffffd) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2501000000050006001f000000140001000000000000000000000000000000000014000100ff02000000000000000000000000f8000c0004000000000000000000080003000000000408000200d6000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c040) [ 1413.051575][T27066] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1413.132249][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1413.132264][ T27] audit: type=1804 audit(1598995274.108:1390): pid=27021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1577/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 [ 1413.275209][T27069] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 21:21:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 21:21:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1413.376234][ T27] audit: type=1804 audit(1598995274.108:1391): pid=27025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1577/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 21:21:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 1413.449203][T27022] IPVS: ftp: loaded support on port[0] = 21 [ 1413.542795][T27022] lo speed is unknown, defaulting to 1000 [ 1413.555490][ T27] audit: type=1804 audit(1598995274.538:1392): pid=27068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1577/cgroup.controllers" dev="sda1" ino=16379 res=1 errno=0 21:21:14 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x1}}, 0x8014) r0 = socket(0x25, 0x5, 0xb6) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='hugetlb.2MB.limit_in_bytes\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x140f, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0xffffff98, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4881}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000002580)={r1}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)=ANY=[@ANYBLOB="11000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf254c000000040087000a00f500bbbbbbbbbbbb0000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r4, r3, 0x0, 0x100000001) 21:21:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:14 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000101000000000000000002000000000000060009000008000100ffffffff060015000400000027e81a04"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(r2, 0x5450) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 21:21:15 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000280)=0x80) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000002c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) socketpair(0x28, 0x2, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000180)={0x1, "8c3342"}, 0x6) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000300)=""/246, &(0x7f0000000400)=0xf6) 21:21:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x9d9d40c09b9f5070, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x3b) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b", 0xc9}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b057511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 1414.366421][ T27] audit: type=1804 audit(1598995275.338:1393): pid=27163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1579/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 21:21:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 21:21:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000006c0)=""/66, 0x42}], 0x8, &(0x7f0000000880)=""/245, 0xf5}, 0x5}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000002c80)=""/188, 0xbc}], 0x8, &(0x7f0000002e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000002e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)=""/189, 0xbd}, {&(0x7f0000002f80)=""/21, 0x15}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)=""/197, 0xc5}], 0x5, &(0x7f00000032c0)=""/13, 0xd}, 0x10001}, {{&(0x7f0000003300)=@alg, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/161, 0xffa9}, {&(0x7f0000003440)=""/6, 0x6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/210, 0xd2}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/150, 0x96}, {&(0x7f00000047c0)=""/128, 0x80}, {&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/85, 0x55}], 0xa, &(0x7f0000004a80)=""/184, 0xb8}, 0x1bb5}], 0x4, 0x40000043, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x1) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x200}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={r6, 0x7}, &(0x7f00000007c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 1414.650189][ T27] audit: type=1804 audit(1598995275.628:1394): pid=27163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1579/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 21:21:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x883}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 21:21:15 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a010000000000000000007eb200000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900233527a14625ffe04ac63dba010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1414.778185][ T27] audit: type=1804 audit(1598995275.658:1395): pid=27160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1579/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 21:21:16 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000180)=0x8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:21:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000880)=0x5, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/254, 0xfe}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/107, 0x6b}, {&(0x7f00000006c0)}], 0x9, &(0x7f00000007c0)=""/58, 0x3a}, 0x60) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000840)={0xffff88e7, 0x5, 0x80000001, 0xbf}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000030003dfa0000000000000000000000007c00010078000100efff0000747e6e6e656c5f6b65790000480002801c00020000000000000000000000090000000000000000000100000014000600fe8000000000000000000000000000aa14000500fe800000000000000000000000b199bdba15ae599a00070000000000"], 0x90}}, 0x0) 21:21:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$can_raw(r1, &(0x7f0000000040), 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020000797a31000000000800410072786500140033"], 0x1}}, 0x0) sendfile(r2, r1, 0x0, 0x107000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) [ 1415.244822][T27200] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1415.312358][ T27] audit: type=1804 audit(1598995276.288:1396): pid=27203 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1581/cgroup.controllers" dev="sda1" ino=16173 res=1 errno=0 21:21:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x7860200, 0xa00000}) 21:21:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0xffffffffffffffe0, 0x7fffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100060000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1415.539132][ T27] audit: type=1804 audit(1598995276.288:1397): pid=27205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1245/cgroup.controllers" dev="sda1" ino=16181 res=1 errno=0 21:21:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @multicast2}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/13], 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000010) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000140)={@remote, @initdev}, &(0x7f0000000180)=0xc) [ 1415.732183][ T27] audit: type=1804 audit(1598995276.708:1398): pid=27216 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1246/cgroup.controllers" dev="sda1" ino=16371 res=1 errno=0 21:21:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e04, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a10b", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 21:21:16 executing program 0: unshare(0x6e000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x84, 0x10, 0x0, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40000120, 0x0, 0xffffffffffffffc9) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54) 21:21:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x1c9, 0xba82}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x6, 0x400, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@local, 0x3}]}, @lsrr={0x83, 0xf, 0x16, [@multicast2, @remote, @rand_addr=0x64010102]}, @end, @timestamp={0x44, 0x18, 0x32, 0x0, 0x7, [0x1, 0x3, 0x9, 0x0, 0xc54]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013700000000000000d2000000", @ANYRES32=r6], 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010008506008c20000000000000000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0xa3, 0x81, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x10, 0x7800, 0x80000000}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x118, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1415.906905][ T27] audit: type=1804 audit(1598995276.788:1399): pid=27203 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1581/cgroup.controllers" dev="sda1" ino=16173 res=1 errno=0 21:21:17 executing program 1: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa1f}, {0x6, 0x11, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xffff}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x880}, 0x800) r1 = socket$isdn(0x22, 0x3, 0x3) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 21:21:17 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00ec2cbd7005fedbdf2504000052296dd300000000000000000000ffffffffffffff0400060009000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x20}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000880) sendfile(r2, r1, 0x0, 0x100000001) [ 1416.037383][T27226] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1416.067244][T27227] IPVS: ftp: loaded support on port[0] = 21 21:21:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 1416.190391][T27249] IPVS: ftp: loaded support on port[0] = 21 [ 1416.283313][T27227] lo speed is unknown, defaulting to 1000 [ 1416.330807][T27249] lo speed is unknown, defaulting to 1000 [ 1416.335335][T27281] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 21:21:17 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 1416.723304][T27249] IPVS: ftp: loaded support on port[0] = 21 21:21:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:17 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x58, 0x31, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x15, 0x6, "a304485cdd5f30a20e593a28fdb25cf976"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x13c, 0x13, 0x100, 0x70bd25, 0x25dfdbfc, {0x2a, 0x45, 0x8, 0x7f, {0x4e24, 0x4e22, [0x8, 0xbfc1, 0x2, 0xfffffcb5], [0x9, 0x8, 0x5, 0xc12], 0x0, [0x72c, 0x3ff]}, 0x1, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xee, 0x1, "dcf44c50865c4e4a17feb3af0e62ddf22dcc974a4ca0527184aea7eca70d10b1ba51c18c4405a2ad9d319dfd9821c78590238735ee95ab64fbec4b1a00a0a0fc24df0f9d41732dd3c8284bd9fefe07e0bce34e7a284104e59217824d790e0820fcf51717379d6045f55543904b0b1006ee7d9e00ab64eb064cac8d77847a02e6bacfb2052a4412574d1fa154cfdddcb8dfd087c621c26b2e653f2e7d2380c06993e00fc35dc1bb6de8b3d8c8dbe7a2b80dc966dfd523dc752f63f6a4d85130c541453a7ee3a4b864bfafef62c304cf952c824aadb54a318e8fc2f26ec2bf1c53ee46227d852aef931983"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000800) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x10, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0) 21:21:17 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6bb7fddf6d6b951751aa94888ac099cfd82080a47bfe57efd84075b9d75238461f81d23fd0a5bdf2edecf2b0634677f6df81c1df9bf0b69a37d7eb61abf329c21bf3a1968d090b7f481f"], 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25020000000500030029000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a2171741ce967e34ff12559cb99d6e3ea7b9e65b77221693e008000000000000097bf43aae9b27f015fa5256763f2732e3c3fa178a7d4b0fed5b560545261ac078e4997311bbff222e779349d9ce18f07da7728d7b79a4fbb17cf71", @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)}], 0x1) r7 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 21:21:18 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:21:18 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffffffc1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000004) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) 21:21:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000003c0)=0x8, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x440c4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000440)=0xffffff0d, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) sendto$inet6(r1, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "48587a0c04996e3a", "fc2d6bddcdce97b1055a3d81dd84949b0cba2f9388dbe421751b4c07990ad2ec", '{|yQ'}, 0x38) 21:21:18 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000002c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004808900020002000000003ad8a07865f2cc33797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 21:21:18 executing program 2: r0 = socket$kcm(0x10, 0x6, 0x4) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150081fb7079ae08060c040002ff0f03400004000065ffffff5c79e444384e7d06a6bd7c493872f7503754d08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f778c606a", 0x4c}], 0x1}, 0x0) [ 1417.640442][T27361] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 21:21:20 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) close(r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 21:21:20 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6bb7fddf6d6b951751aa94888ac099cfd82080a47bfe57efd84075b9d75238461f81d23fd0a5bdf2edecf2b0634677f6df81c1df9bf0b69a37d7eb61abf329c21bf3a1968d090b7f481f"], 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25020000000500030029000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="b5452bbd7000fedbdf2510000000040002804c4c80060002000c00000014000300fffffffd0000000000000000000000000c000700090000180400000008000b00736970000600040000000000070006006e71000008000b700008000400020000000800060000000000040002800c0001800600000000000000000000000000000000870020c1484ad5b26b114f41de5207011bb26c8417289a23abd57cfedec916d7bb7e4dabac9985400389491b1d81be51bc514b886b9f58dd12f359b6140966edac04e25304e988784476eb80c70a935527ed6284b09714153ce5c2faed6a2a92a2dc2e253ff5dd8d19b591e1cfcf1d14212d75502726109def14b2d51b96f7e19e952e1870d6ba3a43e6cc5547cc971e27b80a98170d43687af9c534027abfcc517bf4511e37d5166f92ad3d022c1dc21555db1d26b7d2"], 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a2171741ce967e34ff12559cb99d6e3ea7b9e65b77221693e008000000000000097bf43aae9b27f015fa5256763f2732e3c3fa178a7d4b0fed5b560545261ac078e4997311bbff222e779349d9ce18f07da7728d7b79a4fbb17cf71", @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)}], 0x1) r7 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 21:21:20 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6bb7fddf6d6b951751aa94888ac099cfd82080a47bfe57efd84075b9d75238461f81d23fd0a5bdf2edecf2b0634677f6df81c1df9bf0b69a37d7eb61abf329c21bf3a1968d090b7f481f"], 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25020000000500030029000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="b5452bbd7000fedbdf2510000000040002804c4c80060002000c00000014000300fffffffd0000000000000000000000000c000700090000180400000008000b00736970000600040000000000070006006e71000008000b700008000400020000000800060000000000040002800c0001800600000000000000000000000000000000870020c1484ad5b26b114f41de5207011bb26c8417289a23abd57cfedec916d7bb7e4dabac9985400389491b1d81be51bc514b886b9f58dd12f359b6140966edac04e25304e988784476eb80c70a935527ed6284b09714153ce5c2faed6a2a92a2dc2e253ff5dd8d19b591e1cfcf1d14212d75502726109def14b2d51b96f7e19e952e1870d6ba3a43e6cc5547cc971e27b80a98170d43687af9c534027abfcc517bf4511e37d5166f92ad3d022c1dc21555db1d26b7d2"], 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a2171741ce967e34ff12559cb99d6e3ea7b9e65b77221693e008000000000000097bf43aae9b27f015fa5256763f2732e3c3fa178a7d4b0fed5b560545261ac078e4997311bbff222e779349d9ce18f07da7728d7b79a4fbb17cf71", @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)}], 0x1) r7 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 21:21:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c00020008000008ff0000000000000009000000800000008000000014000600010000001f0000000300000000005dfe982b691b3836808500002c000c00000000003074bae5"], 0x8c}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000001c0)=0x14) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:21:20 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xffffb10d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000080)=0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) [ 1419.180757][ T114] tipc: TX() has been purged, node left! [ 1419.187232][ T114] tipc: TX() has been purged, node left! [ 1419.225502][ T114] tipc: TX() has been purged, node left! [ 1419.235172][ T114] tipc: TX() has been purged, node left! [ 1419.259784][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1419.259800][ T27] audit: type=1804 audit(1598995280.238:1416): pid=27381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1413/memory.events" dev="sda1" ino=16384 res=1 errno=0 [ 1419.312583][ T114] tipc: TX() has been purged, node left! 21:21:20 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x2) [ 1419.382350][T27392] IPVS: ftp: loaded support on port[0] = 21 [ 1419.470986][ T27] audit: type=1804 audit(1598995280.238:1417): pid=27384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/831/memory.events" dev="sda1" ino=16381 res=1 errno=0 21:21:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a3128dcae65dbcea6d6e1aa7d8aad52afd572e989ef7c39e3b1f866f8334d2b9bc27c57cbe950a28c6c38f8bed2f5ac2f10d26dca09ff2129"], 0x11) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000ffffffffffffbbbbbbbbbbbb91"], 0xe6) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "a0bfcfb4f8c9084f", "3f9b09782b0e2111bef5dda943ac5bee9fda32478aaf6a16baa90f4b08838407", "d4460e84", "386154f7a9e3e7be"}, 0x38) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x5fffffffd, 0x0) [ 1419.549632][T27392] lo speed is unknown, defaulting to 1000 [ 1419.686793][ T27] audit: type=1800 audit(1598995280.238:1418): pid=27384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16381 res=0 errno=0 [ 1419.743261][ T27] audit: type=1804 audit(1598995280.238:1419): pid=27384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/831/memory.events" dev="sda1" ino=16381 res=1 errno=0 21:21:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000018008102e00f80ecdb4cb904021d65effe027c05e8fe5aa10a000500ac14140000000012080008000000812f03000000000000020058f030035c3b61c1d67f6f1f007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360d0f206cca0a9ed849a4879d87b798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef", 0xd8}, {&(0x7f0000000140)="4b11c8d09734b79ea5033ac16372dadfbaedda7e1761a57d5c71f67328e89d744c3d8cd25e90429da54f8d79b9f42dfb0525ea2520439e8f3bcc73c2254bb44faabeb4cf00937c3762975b880b280f2d55dfa66298"}], 0x1, 0x0, 0x3f}, 0x844) 21:21:20 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x7}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1419.917408][ T27] audit: type=1800 audit(1598995280.278:1420): pid=27381 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16384 res=0 errno=0 [ 1420.010391][T27433] IPVS: ftp: loaded support on port[0] = 21 [ 1420.061802][ T27] audit: type=1804 audit(1598995280.288:1421): pid=27381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1413/memory.events" dev="sda1" ino=16384 res=1 errno=0 21:21:21 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6bb7fddf6d6b951751aa94888ac099cfd82080a47bfe57efd84075b9d75238461f81d23fd0a5bdf2edecf2b0634677f6df81c1df9bf0b69a37d7eb61abf329c21bf3a1968d090b7f481f"], 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25020000000500030029000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a2171741ce967e34ff12559cb99d6e3ea7b9e65b77221693e008000000000000097bf43aae9b27f015fa5256763f2732e3c3fa178a7d4b0fed5b560545261ac078e4997311bbff222e779349d9ce18f07da7728d7b79a4fbb17cf71", @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000580)}], 0x1) r7 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 1420.127016][T27433] lo speed is unknown, defaulting to 1000 [ 1420.207846][ T27] audit: type=1804 audit(1598995280.428:1422): pid=27397 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834212066/syzkaller.Yu970J/831/memory.events" dev="sda1" ino=16381 res=1 errno=0 21:21:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000006240)={0x2c, r5, 0x205, 0x0, 0x0, {0x3}, [@HEADER]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b500000000000000001004"], 0x3}, 0x1, 0x0, 0x0, 0x4044091}, 0x4000080) sendfile(r2, r1, 0x0, 0x100000001) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1001000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f00000000c0)=""/220, &(0x7f0000000040)=0xdc) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) [ 1420.393580][ T27] audit: type=1804 audit(1598995280.548:1423): pid=27398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir144038528/syzkaller.j5WlkW/1413/memory.events" dev="sda1" ino=16384 res=1 errno=0 [ 1420.613069][ T27] audit: type=1804 audit(1598995280.708:1424): pid=27412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1586/cgroup.controllers" dev="sda1" ino=16187 res=1 errno=0 [ 1420.649146][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1420.805038][ T27] audit: type=1804 audit(1598995281.118:1425): pid=27438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1587/cgroup.controllers" dev="sda1" ino=16381 res=1 errno=0 21:21:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x80, 0x800, 0x8, 0x41, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001200)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}]}, 0x34}, 0x1, 0x0, 0x0, 0x48089}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000201030080000000080008401d000000"], 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, r0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f00000011c0), &(0x7f00000021c0)=""/4096}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(r2, &(0x7f0000000040)=0x42, r3, &(0x7f00000010c0)=0x1, 0x7f, 0x7) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001480)=@assoc_value={0x0, 0x9}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000001280)=0x6, &(0x7f00000012c0)=0x2) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$packet(r5, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001380)=0x14, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8, 0x13, 0x1}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x30000000}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x20000040) [ 1420.972100][T27433] IPVS: ftp: loaded support on port[0] = 21 [ 1421.036790][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1421.645372][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:21:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x78) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="a4000000727eb8b6b6c31031c2bb7dcc85cb55d2a3f50b29f0c2f53f6c335cfb70ad413190a42a2e125ec9b6315c5f3669c80dc78641605238a2c6de5eb385a4d5b85dcf5f34c1fbd128607bf864940c938610e0a3811f4539e602f72676d26ee6243d30331b795875760034c10dfb0bec2223b5a033dc6abcfd196d8fed9d97cccad91d52f0d916ac59279c8929a140a29dcc0d94e53509fbaf1c97d33c8afc5d5d6269a5"], &(0x7f00000001c0)=0xac) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r0, 0xffff}, 0x8) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@rose, @netrom, @rose, @default, @null, @default, @rose, @rose]}, &(0x7f00000000c0)=0x48) 21:21:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_dccp_int(r5, 0x21, 0x1, &(0x7f0000000080)=0xfff, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002e00310f00000000000000000000000031a03d", @ANYRES32=r4, @ANYBLOB="00000000f3ffffff00000000"], 0x24}}, 0x0) [ 1421.891341][T27507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:21:22 executing program 5: socket(0x40000000015, 0x805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)={{0x107, 0x20, 0x0, 0xe, 0x20c, 0xffffffff, 0xa4}}, 0x20) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c002000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b0f, 0x0) sendfile(r2, r1, 0x0, 0x100000042) 21:21:23 executing program 1: unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88a02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000d8ffff670002240000000000889078ac141400ac1414bb0d00907800"/50], 0x100c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3643de26ac547eb234db4a0f0fd67df2d13d3f418589b0b809c841817d", @ANYRES16=r1, @ANYBLOB="230900000000000600020000000000080005000000000000001700", @ANYRESHEX=r0, @ANYBLOB="ba23ae3b564758f3ce47c4ad6e2f80599184f078097fecb95fdefd7c4a95ffffffff1f00332bd6666205427b968e2950e0d827d83883f61c25785d2901000000a90000"], 0x3c}}, 0x0) 21:21:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x4, 0xa, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000d80)={0x0, 0x800}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='srh\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x2, &(0x7f0000000200)='(\x00'}, 0x30) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000880)={0x0, 0x1ff, 0x6, 0xff, 0x2, 0x40, 0x200, 0x400}, &(0x7f00000008c0)=0x20) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x14) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x480200, 0x330, 0x0, 0x0, 0x0, 0x220, 0x330, 0x330, 0x330, 0x330, 0x330, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'ip6gretap0\x00', 'vxcan1\x00'}, 0x0, 0x1f0, 0x220, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv4=@multicast1, [], @ipv4=@broadcast, [], @ipv4=@broadcast, [], @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @loopback, @ipv4={[], [], @local}}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x3e8) 21:21:23 executing program 5: r0 = socket$kcm(0x10, 0x5, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000140)=@ethtool_dump={0x40, 0x4}}) 21:21:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:26 executing program 0: unshare(0x6c060000) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept$inet6(r0, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000080)) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003340)=[{{0x0, 0x4000000000000, 0x0}}], 0x600, 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) 21:21:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x9, 0x65a, 0x848}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffd40, 0x2004010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24, 0xfffffffc, @private0, 0xd3}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffdf, 0xa) recvmmsg(r3, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f0000005ec0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x4, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x92c5}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)="0b562db8e85b661e4ae5c9ac38b72fa14f69537c1676f35eee24c9cc67f4460c0dd1aa32fc8d887354be1bff8a6a5ea8ce15dbfde3f85d31bb3da90791a25d233901e2ba4a29ee3fb78848ef255acee85daa539235c8eba3f9012a254ac4831298fe8f99b82c237fa5ccf0cea511af5bc3741028896e2b4344444de3f48355a3e7e6a6b4bff8e922673dd0624ce863ba8ad386be53470cd9143f6443321d9e1dfeb7a4", 0xa3}, {&(0x7f00000003c0)="4c14977d722d78f7f93305d787235978effb31ea39e2ae3417c5b7cc7cefb4362e3b4dea8d746b653dbc4d868f9565abe8dd53fe8b32abc8bcecd5fadd9676f370aa6265382beded9e3f94aaae922e8767ad5af8b7d3f77a867bd85e4c67f66a4293535262e166c31467c6747e5da3322ab4f6a10c685480e7dca8024eef8386e0543ecadb9120", 0x87}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="90812307dfbcadc404848269cdb093856490dd5be4b94162470d7fc91dc4776ee0aac4167258dd73709bd8ee265cdac8e049b6f90e11229ab6d319087c5496f0d352b28f8d36a25e9beb16fadd65ece7f42f66f87a4e411dbbe26640b0b8f5be47f73587c1fcd9b1a01a0db4e6db6be492b4cc0eca53375707221fd6067e4bdf7e9f2cf9f92da9dd33676e54ab1c05998e591cfb7d817b2b17636fb1cd2a0855995691878b218ae6e5c3c7784b3718e2274f17237c769177b7a38a3da4", 0xbd}, {&(0x7f0000001540)="7decbe711662509a93a2d1bd46c75ebb77981247689db529fdfb6f6cddef449a7e4801a0a927c0a5255ad27ce1088df2076c47b871b9593c7c856f5ea38ff552d1076de3cb6ce300e82316800e4726893a84bde9ae28ee78d972c1489b78445bbb2ef9a7e9b38510543c5a6d6384b06a4510328c", 0x74}, {&(0x7f0000000140)="5b229255ab0f843ab8fd4191b1e299492e", 0x11}, {&(0x7f00000015c0)="06850ccd5b25b90a94d846bdc45b2bcaa638427c3678dbe1f32d087afe25b705c8f3f9ba9f3be7597016c61398bd03e5967b9127fe677fabbaaf78c66d6076643f37a96694c92f055d31ca36cd3379e4af7bea269478df44e3b00f9e979d2b014b43e730c49087dab8a28462b2c59293a84a2a6099ce353159d5a4e00ef3c329c593c0459a6a61fc30d952604a252f7c881f628e80f40a5d2bca96c86413b1ad4819fa11f70fd464dab80a4e3ec1cccf7a4d4f0b9541e8e0cceee7cf9d1753abe2814d90ddf625edf8813c94e8b84ef770bba97303b9b1ff4eb792eaf86f", 0xde}], 0x7, &(0x7f0000001740)=[{0x20, 0x10b, 0x2a, "98cd98428e448a11bb00"}, {0xb8, 0x119, 0x7, "6815ff142c0baee2ee67bb6caa233a214228c95edc49c0e950850ac149de959856cbc8e1c65636c6ac6f6ac20ba481238d6b679a4afffdcbc9f33a843496f20cf2565a07481d79bacbd2137d407a7fe194cd9939e67cbf9293d329d2b84a73c21467d11ac4ded7be32f22d5a7a036bb20339a577bcc50f9cb57c3603cdd3467a83b50ef24e9b44fcad0cfbe831139a2f43dfa0c43a965bf55e832f94b2948327a525fb1d"}, {0x90, 0x113, 0x49, "722150aa4ea15cf0fb43f1330289441bb1653132e4590b5d437f5e8741a291504299c20ec9b596035ad1d6278b890b3e381964ea9bccf868eb6dbce8f4de72eadb0f2d3335050d8dbae23e76646a4a7a4a1c37917e03b9d26113c35e856ca0d5335e68d01b9aef794fd267a490c1a3486968b204e299326f123ffe"}, {0x1010, 0x112, 0x2, "bffd207a327fbffe6612e4a73dd6acaa7c8b56f3db4f5c16894101902d0e5748dacf5b541400fa691f8104ed6228bff3f01098d8509884fd83f1ab05919d4af6a5d205c7acf0521280cc5fabbdd9e05e15352562c915f307b269c20baab47672f956f374737a5c5f9552d1d9a97369f33ff38cc09450630d9744ff11cbba73fc1df4b6ea4bdc5f0bcacda662a3e6e032295afe745ef5b6c695318f4512ff006716b2e001248e524b6a67241187342c6fc6e56f55ba1cfc5708122ba0c79a59f5f9f7c3feb3d1cf99a1278ce4ec063d0799e0c6980821ff4334e497ca56b279795ed0a7b931b0dbb2314e2123c43b5ef5099370b6e4bb20f287325ff2dc6b6cb5e2e7ea02fd376eea42f7f0c4c5882cf1f3521fb9cb3c178d97a8a129324e91ad0b2444ded6db4b9f472daa1790423b63f7bcbec20f81ab1ea441c32db6c00508b3da601de312e263931b4777cd7364a02c6c7e74326efcf793a359ca125723e05ce0ff189c4d4989f9bf5c1865b1fc93ebb421c587f0bbd6df77e79f72e35ae6b3d28760e96608ae81595966e3e67e52d4dc27a818a55663767cd0e0081aa3a541c50f7baa61c28a0d0fb44554054d9cab125fedfc0cbf65e599ab03b14b6fc3cabb44f3854fcf90db2fb7509be4736afcd4a408c1929a52fc1c9aad359755de6389dc09893c2389884f96fdfb8897d285bb132718b8f17d438291bbe5d205148b0ced428c0c47a9fdc56b7956c70739ae4ad257bfe52c4c5c2cd2fff1f8bd31ff810c01f842a182d711f3be60c3cc9567dd8658a13561b73f1c61097f615ed553710c902ab3116dc1ecaa2ce0bba39f3b23eca01cc847ed89c42be39e5183239e4de6b1f3f26c6209784b96a0bf029f6bb2d4da68f963d2cbfa4f8a26bdfad663470836c6825ada57e46449c832d74bf64baad8f96d648b9f2c5fea042ddc2424d9a4d3996bb7d630d6278eb9e978b8db6627d8909e6874f3cf1b5ff9ca7747f29f87d368596c55b8b67254761a3fafb7577bd943e95c66d4da41830b0fe1915fb2beefe5219d6420a37f3d9415c97e3962fd3aff4003b8ba1795a8fcfcefae8466bc37b56a035ce4689318f01241cbfafb62a85f88634fbc28663313afbc0030714986298e7fcd74e811be062eff5712c6191523f886d5666fdb4970d93d2b650e97b8087ce8930661402545de566769c327f04c4aa6999f21df86984c7085862526e9d78ab289e47a88f16bca437775bd07b2ed0b7f030aaba17de5326c0ec4b090abb6b399ab007612e0cc6121f193210a18b872a0fe1b1b111b0acd3a8b2557698eeadbd1f7a7e7a42c5e68ce0990a34dd74195624b7a89a13ae6dcc9d499da7fc425d927613350e78110f65e63fb14650fc4232f4bcc9f56e538d101f2813eb7643f4c97ddc02d4124698962b56e865bd7953c8514e0f183875737bb0a4348dda89bc1cb10c86e5de9ae4a989bc1e453b94475cfe8f58f6b44645fd60c873eeee8f72e193e7e74790217871ab8d4d57a0a19c3e17bea0e9646555c0d63e1eed0a25246810e24fd6cd7d108acc2e67836b070fafa2c15971c25f74af3e2745606b4fc93f4a35e0a9a354e9f851ecf597de5ce04d70fb5b67a7ae929fc43f882bffff48e8d5715fd690240b2c8d4ec4a0832e0176ad8c8617f92412a3774639fb234ccc9df62eac647f2d6ad6c75ae12f7855632c85abcd3ca427ee18c6c57775441c9aef76cc3c62042f9e87b35876db5e7be89acf35c83da0e3e0bccc1aa044a2b921efd872f31e91e17101cf73d2c16b0d2a4d8360a2018455246ad868f1359f4424c13b5eb087f3c70d0f096706b216d460436bedfe3cd56b325918b3b49b8bb12b0cb889f68e4e25fa40e8d63021731d15495ee19bff78411f919796b93c45f2cb728011f694b2b5c1eda46c5df28cfe355ff3b26baa668d4c1b73128a2b0eb1b7456df94a8b00d383916edddd7ff653d60e2b0ccc53daee40a9fb68f18dfa7744ed24cf8c77580a9e9810f091297e2f87a64f4c6f147dadc7edd2de3840211afc9aa703a0886c4719892a0388a90fe7f72637e83ca4cdf3e4733f39bd4fbcf1009bbadd444c4360dc259022a5f29424c49b102186443057466f740e618196b9a5734ac696e64a77060fc5fe3b41c039d321c19a2414cf4ec529b424fa7ba018ca39c7f1eae4d76ad204f3e2addea9b8aa5978e3e8c4265193aa58971f03047476e656a0fc764de4c11898d9fa0587ddf42fc9727f64e1db4609690cc1b67577e6831561c5ae4610e73ae8700c76a599cb1cb08f2a2f1a36317291e8fa387c490ae65c7aa83a354b26d5d78157c5cf461eb5d4b6f00ed156c0e469d2bccbff693569e612446c75536ffc3738b0a23f86b55c9bc5a8f0ecbdcb64c62fdd9b5e929798989f132c819e38840c3a61934730ba9f5c008572e7e0f647a06f73e3f8d917416c2891eff9a7fc466034d19b9cad3e81871644ebfae600a065284ea5f1ed1d9a0c700816684b83c3ae38aef4afa830530fc0ee901a5d1a8d55fff95e9e9cc7c9507dfe93423a258c74a54472c113354fe5852e8f1cb583a8da7b57e1eb34981125a545ece3b4d95702df727d7efd0f362c2eee9d5a3e919d33391eacbea9bddc92cc91114652ed058d4bce3cc39fc569f3c7635a036a7bcfa3e9a5abcada6b066b61171df627453ae9a8ab010cdc8c76d45ab78da577a44f898c1ce386fa42c73fdb454e34cb97b9ca9a043fe904b2945b7201ccbd84e4f782f0750694faf9356e926a6ba6aeab7fd124126a8983f28b4af43989b9dda9ab9696656054fe761888968b86466b8255158ddf6a37ced7424e387c7cde4a51e7bf61c2cc02d18a5341138d9cf6897e1190f641ccd579935cd67b8475c4203956a1d678d00fac32d766a0594ad723d64490dea8f94695b30fb19d12cc9736ad54c631e50163d1aee01d39d171fff8eb23cb806dec16bfcfb842abf986443a245d556451092724705a0cc3152904604e679b6e8aeed691db8f66b6e150500b7c912a77b77e458dd98d6bdebc3ab4e56f7fa241b84f546533e3ea44353d7f89d19dd208abbf8583c2e317c0d1056276903d197381a4b17b1a1c49bf3037197ac500b68c4079b7cf87c7f6112057dd94cfdd679f671aa06007b9c498c184a1e8213d68cb5c8ea3947a5ef5f33e7ec4e0a3812cfe5c34a663a44adf78a55ced175fec37d249ded37d38cd5492a4e1d03e36992060040252b83e2628ea047a5ac1fe44316e91906f6d022bebf9981603fca435910379b000ca3b8ed7fc13313bcd6b86b404b291d26dd72f28538d1c74837d0d9997cd81be925336066225cc57f099404c0a365fc92459dc284ac251d1c7fdd286045900a15787702aeb532f862eed946794bd298bae6b2c0d655a239a7597f1367eea88818acdbf028a6dd8f0488e49eafa33a383ec865999303118f258d0d47d54762aac94b9ef02066e2b440403c3763820404e7f47acd8dac07689f670525c84c904198d298b9f596b23b2495463c71d3b31f51b66632adbb6b7abe7230ad613dc696b200b4eb9ad70d3e669203d0d49d1d32ef92ad41624b6da2874d12a863c1232d38601844f666f5276c525c9899576a8fd5bedacc88355ab18f641cf6843d92b1451e85d20157351e3bd984acc0673cebe86d2c4256372699cbe228104937efa50a9a0255794c05b56d67b2c6f5c63d06348f5944983ff1c55c6023a468dd70bc95c812047acc086820b2eafa90ed468ace43efe2074362a535c737e63009e03bf4eae1cc91031e15a37da6e332b705e6a307aeae8e40c5dc1eb6c49ca48e64a5343a4c8f582b6854326a63638ce5d9d5f1ceeb6a2272f728b827b9f220126f6d229febe63ba3b20820697aaca13f31e91e30a855a4b94200921b906b57f6c9f9728ff50b7501926417d84f50381c351ed2e13231f8ab2e35a76a649a09eee935e39056483565bd044fd7597b6c6b5d9f26b5e07956fbe3cf736a29d58f0b017090505b2358a07f7934a23aa8ac4d27cbf9eb0ee405e943832973ec539283b1a2262d1a24ccac05f70fcaa5a535e625267896704c80c76a0899d7f9b9c735eb688917f1e8e4e0e49ee440a43a8d81e3678cb886d19efb2c4733640bfa312bee522e86316ea43a561f7bee3278325a26061966dc670463cb674c74563f600ad2ee0bd66714d0ea0545e6b2bb8540098af6ead2fcd13b7e4985d40f92c3a91df0ef4d69d19a1f556a5a17926d333ef2aa2953d55fc13bdddc5962a07ce19b49c84995fa21d1fb8249478876b93f0e922e08c2d828880f8790b7f2241f25989ac6fe6a71d25298db5f6f75e4a1c81d0df3d0295e5ee4f53cce5d6c54fd21c7fdacf572be6fd61008370865baa69aa9432b5226f78308dec41b3eeb64509ce572e3daccaed6a9bb1327aa162c44c1f1b0b5a135d46e7d70394e8d442172096758135e8791da66b275eed65af570931031c5c12764e37a1e3f927402003729771f332986128a8829d31a6821b711cc626e17d6c05ac988a5cad42201a4ff7baf210030a01bbc55b3091838ceff3b4b069d11077e651b0054c2b062a509562362b0c520befdd6769d44e66a37be0a22b0f0a7bf323c4cd8dd82faa0214e789e3c1e2e9f1335a1f1c55af280d70883ae99a02f6b5144a8af11c05f67fe4d135ecd723863420e6780b477dcc3215588ac0b726fb8cd56dbf4c58f0417962fd7c1da8c7a167014449987a745eec7e7019e61f8e6ca261a13148f5309c923f525fe91723d9de21c03f909712833163bb588b81b91b6bbffdfce54ea48cf147ac74dafdae598328c1da3e22d3e9e659d9cdf74c4f83913670b30629545624084cbff9f12a1551182873b1a9db9c6163da9e3769eeb2c1494f690716c5643db0d0ba34f14103d03db7e9534abc1e3eca74a3461d54879c611673c1d1d12b20fc8b90281f1069b1e6f4e00e0396094a34a43e4a5461852d845cf7472ca8b19ce43b93c4e9f42d64664aaf01334a1758e54c6abf862254705f09ca65590c23ff42d48e4b96c8f3b42b959799a17054519b9d25367586923353ee0a3fefdfdb0d2b41931cafb61bd229ef0fb4930ea1ba9036215b485b5cdebd0d67f776301a88f43c99ce729427cc548ec0f96d89a9140dd343490bf7aff750aa412809a281a5736604d237f19fb278d5278a9b359beb3b642e45aa3ab0ff6907012e0b08babf262bf64dd21ba6af8823d1b39999daa1de61e7543ca64c84d958b66ff36dca42b67d98f565978b8daea3db2a399176c6f1fcefd5304b546117258eecf833906055eb1b18d7433cf0aa17719b20cf46da77f5cc93446b22dff01e96c4073ad6394da73ba04d86f9e6463cef8478c32add1df0f1baa667503300fec50bae756a31a8dcf76cdf992c563c2464faf6dc8913f30794e81cb730da05ebaae3c4a79ab4f70dd35042d7927200bb57de8e567356fdcd6ca2272bb94fa6e77ce7d43d10b6922a19e34e324c9028dc19bda6ae3d9b113f2623d179594c16df7fed0f53f98df543b02a6c923bd0edd8b588a5c5d4a70e0e36bc09338e65202821708adcbefed8b781d70d4ba1b243b2af7ba269f5292f400205dc4ece0850c96cc6e4362c19f42e5b0e8806846e4508e95d72869f2e0e0f092aae71034b7bab9929cec682ce7366d7ed8399de7d22f163a1c0d219ea4a23e257685ae463616d2daaff76e34f1737ffbdbd69cc4b0863d040af939c4a13ebde959ef0584325bf33f659ecf0dbadd835f2fbba479deafa521fc7ccb434b64c2304b"}, {0x30, 0x11, 0x8, "d85af833fa408766927dee5e9be79ddf1cf69354827b1d7f526df080274773ff"}, {0x70, 0x4, 0xda0e, "2b2ab99e33162b9caad806faf7accfcc52d84d1be79215d53a5952b1a8a35b0fec58fbee818956880d30fe8912ad6721505a8543fdcc48f2c975f350a12ca226a2a6ebfabba25bbbce2e965b90e84a9f40b128711b2da509d5"}, {0x20, 0x10f, 0xf9, "326346f5aa1ce2291a"}, {0xc8, 0x107, 0x1, "140163071b4730f0a6c973310c734da28b1b10e9c2c6409ee95a3bed3c3ae69d642b7bcd1343d2a7df6f700d97d97d0a3e2d89dad663e501b6eb369e74a43682d1a2fc1550a57ee47dfa4fe4b16f612fc758b6c26741f3b56593675b9f0e950073f7694d585aebbbe4b53be9c7b37920d0158944c38bdf677910e5f5187259c3d3ed2fa69b94931f8eecffeee384f42de9098048797742daf33707ca23dd8e818ac92fe7acd0d4370d64b16b696ebebd7c0cd554341f23b5"}], 0x1300}}, {{&(0x7f0000002a40)=@isdn={0x22, 0x60, 0xff, 0x6, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="383cd0340089fd73b85c4d955ae832a65f7388e0b883810d83b98ae3b0501a08ad066de5b6774833d83bf71d1d4a028ad3f50fbaa04afbf9675419dff5c13894d2b0739539d7c80007924dc03bb14ba2f9c345b031f874534f9994243b3e98bf1eddb792d5f139f826f5b6bb2796cbe2dd026395c0bf09cfd87a3c8c351e43004535ce748b2f8197b8859d7f5f4a23a8efbbd66c5b04ae3c045f371ea6ffe41eb2e20fd69c4ae127ae974bf5ae88e97e6be38b60ef306830d1a217c03a7523783b", 0xc1}, {&(0x7f0000003bc0)="64b1af949a6b41b28a36397ac8fff5dc6adebe33f32b8b520e8212b1e32d8c378658ab9f3226a98642cee4c8568d8f6ad2909740bf037aa0c68aace2a45018a44347ead993dddf4b6cb4252270710520205cd4f3ce662cc8a742b6a6f3056d438456d7f57d843f7ff88edae03aecdbaf7ffec9f945f3b2d1f368d0318a0e53aedaad3ce674eab548f8e398c559850c2417540b74c285ea40748c02a48c76697af07d1c49dc3dc38fd3d37cb590751588ac07ac3919ddbac0f3ff36f4719651b67999c29079316756e15c6df969a6f81d9c898f5416e8deaaf4dd59ba7cdca5fb2e388c34f8a843096d72cc28bf", 0xed}], 0x3}}, {{&(0x7f0000003cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x0, 0x1, {0xa, 0x4e22, 0x7fffffff, @empty, 0x9}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003d40)="dea8ad401ba9e4145a", 0x9}], 0x1, &(0x7f0000003dc0)=[{0x100, 0x113, 0x5f, "7fc9401216e68fabc9fc5d3f28283dd03a4b84ed8cd087a2df45b59cfcb6962cb448c5aa228a2afdd512b51f69d50a6b208d829a603bf030bc19fca13eeef8da593676a62885c28d6fb44aee3e336b93945fbb3ca4d1022aba0dad15c8c3d0101a4428a7336118145721fe718aa003672073dfeddc2abcfe5acb00f53a857510fad70bf5890ae98150f101759229e493115d1719f040aadd3c31f5648a97e663a81a5c3f80527ec28cd7f3a38cdbcd8ccd7e470531eb0676d2bc95cfd7326302ce8215d4bcc1b57d5e9b2122d5e255909654127f6bf37b09cd9eb795faf1808414783f179f7f5f550fb0b0"}, {0xa8, 0x112, 0x8, "ef93bfe07af38e67c9402f0a09fa944824a18b34c0c5ddca531497acba3f638a510a8f982ead0cd4c2937e82c482bd6754d07c7e4a2373cfefe2217ec2cad75c06b8b6355b6b61bf9bfcb4f1625c6663b6c97f9b8eaa94e1fef2727a20c02289ccd5da32b3fc35c7d2114ade0114e05e1442074ada6a8208962afdd8c287df4d27668558db78d667082442e61802bacd161697ad"}, {0x50, 0x10c, 0x7, "dc2614193c2f2a9e3e5b07139adb0941b0df4ac5b601538600d94c1cd1a41ca65ee40cc9e73c7c5410ec6819911ba152c4bac1611bff7fc44209f00f1dc3c1"}, {0x1010, 0x10d, 0x338c, "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"}], 0x1208}}, {{&(0x7f0000005000)=@can, 0x80, &(0x7f0000005380)=[{&(0x7f0000005080)="002039400d82207d4b3a610e7daf92f75a64a48fb724cf12c624ed58d32efbac0ba93160d0c192803625ff1520a9c3ebb4b3db7b184bc94d4f5f", 0x3a}, {&(0x7f00000050c0)="864ddc1e6338cdf82f92808e7e1fd3981cfc21a25ec85a010dfa2417708406c6038c0d996d74768b9cef1abdad032b168d8918eda04913b5f27954dd81b049b1bb2986e213b2939a22a2b8c3b482d103519f511206fcda1cbe25896040352fc8237ae83a2b20d3994b68737e2ba1a08c6902aaf83f1f1df81d9c4a0216822ec8eede871bd44e93d744ee8e9870c40416955e0e22e128537bf3e6f22471400098722dbf82d53995450b6d56c576c946e06d7d618e0e1af6f46ad48fd32cabaf3807c300de0b4a9e8b3e912304186e3c0014c9bfe95b1bb60805d0b528a42500", 0xdf}, {&(0x7f00000051c0)="53bef7dfc8aeb4119bf3a52eac5129e5339d8b72b684f79612665d877b9479ad6fe5fc2ad9a5c56c55a3e7c5cdfab7fe90bc7a9889f7b940542e29c216227a740fbf528eca9c9483d23cf3c644d246a9e18d24171ad1710fba9aa98c10ddcc3eb73c25083d4c6875774db27f5e3b5098645bd1f1b29800c39eef14f24bd18b9373c03fd501a208dc8187d250984df034d8a06aaa77a06107d6ebbc1206ad2ab65bb75e0df0cf6ab5db075a509c42bf9fdf80feb49e2f501a9c56d8061ba717b365d50236c4ddfaaff1d96afbd83ddb380ec97ac2a590220e9e3691ee64c98aec14f12e2cda", 0xe5}, {&(0x7f00000052c0)="b97b86c2826781254a9d550173695f1d92d970d1dbf7a0cca934040661d0fc3f3b8eaf986f40a09cc6bd0a2b4758a13d8eecaffb0391b32d85ee4b748cf6c9ce6867e78a65767da726beda8d4dd24e1a5972430fc75d2ff2ffb0f5bba60b17368c8f8f3840c6b571cf7363e146ef6ba649f62a4c9a72cef3b58abf85e7db64f245df9abeacb9a0b8f26b18a1218815b6", 0x90}], 0x4}}, {{&(0x7f00000053c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x1, 0x7f, 0x4, 0x4}}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005440)="c3e249bf935db8a302576b4681f232924ec1d209dd51d9a90a6d4669c56bd2dd5382028410310f99c3fbb8c3723ae94e5bf0f9968ccad8317acdcc35e553114b25f855a292cffdb48b704509411fece9d8b857eeb5039d75e77055aeef8b5c578154b7ee63adceaf30e26d5f1e9bf69f71", 0x71}, {&(0x7f00000054c0)="0305b6f5dc710e14bb93084169f7cb59a2941396c26d3a7e86320978198c64711e72e08010dc27eedb5accabc4abdccc5f30b490975aab082fc6532b90fa01079aee25d69dc358019141fd7609de727659a367155326670f9eef95f247e6f56a59ac9cfb4b16e318e931611d95a32280af7bdf250a04dddd6c886153376b927068e7b850ab5d46bb8bf25d2eb1a8234b176d0fffc5f5d2ee7fc9043ebd2b58c00c45dc16de52f0d0a253e4e52b4f8571f8f243257b9600ba2a0541d3805b5e840be281a7e7b3309064dce561eebdf8cf8149dcdedea58428ec4361021b8fae31aaed2099f74b0f258940d38b1928d2f4448d09b91cff24", 0xf7}, {&(0x7f00000055c0)="c221347c04a8c8cea8a7ec0b1a7c29985e9c2f9361642e95f31abf675d2206eac0e2fac28785d4285795fe4493851cdc337de178a9f64b8f43bb77b1a8d123e0612d7cc0ea185b0ec824d038f672c639f29b8331388ff349ea296751f1def0ddb68a6dd3addade412dcd8cd1ce8dcd787ce3c495004fdc9dbc64597a08e3c9dfed0729addaae0f3eb41febc076ac50d06aa743a312dc66923453c37951fb464a77440a159a682bb12cbbb965aec559986a26c7d2e21d973b963bfb6680a79836f2cec757cfd78e06dacd8d4944368cb2a018e21d87527618bb9843c1b1ffd678bd1b757f3abd527031067215e82824edb4", 0xf1}, {&(0x7f00000056c0)="4f418e639122f162919118bcd3224cec31b0461d3714266368e92657ce15a3370015d9d7676ca2a4cf8db613e7b98d2929ee2e06c66ee88c9c42761836e5da4f651a55d2dde205444dd5a408c50b3539665ef9e8052a2ccd5f985d8037e28234af4ec529", 0x64}, {&(0x7f0000005740)="3d98150dbcd9", 0x6}, {&(0x7f0000005780)="293b94a93fc69a7566ad71f81e1f81392c4f6ff1d8ef3ac64f54c0d6f1956f29061fc1bd1dcd408069e43e958bb2b2067a39dfc4ce4b7a97c9a673a4fbfaa144aaacca8c68d2171c7b", 0x49}], 0x6, &(0x7f0000005880)=[{0x30, 0x116, 0x3d, "754db4ee8ab20cbd3d3bca3436e152df7f69d9f9548871ead77f536d2ce4d26a"}, {0x100, 0x3a, 0x5, "3a2f6867f5897d3df233a76fc398ca512b6170f6fb450468f1282c72503d255c876b796f75e23233e4fca1ff71d25d2aa38943b2aa271d93ef672b4e7102bb0cf85a7e4f20d335336a9b74d57786f8aa370ae5a5136cb48886d71a517589800f07756bd42d1569d7157894de34082eabeb03a221295088e4891fa16b5f87dc771c6ed0ab0520bac1ae6c5909f650ad57d087c4ff2df7986d9731db18e109be0177c686d634ce4b6b30f353d30e181f52af0578957ee9528cc49fc307729d1ed548a7e99f8371098fe0653f7f2cdad39df6b5b5cf2308fa6bbff2ce2e55d0576b34395f5451b0ae42c530d14e470d0c1a"}, {0xd8, 0x84, 0x3, "007e354b99e7bd078d17a5481777802895497a9651f4826e822ce04785c3886a77b1845e01f503581d295caa0b5d005c4ff345325bbd971da775d6f58acb6ad7ca695641a9ec317d57d0fbee5daa45907f0e6cf9553224b3f2c211d1d30cac27b7e955b1434a1b681058bbfc94d8763afcffb6c4ca0e7298985d36bfa68193e99ae1ca66b974c92317c985923aae3c583545a35f9cb64e84da734fd4ae70d49525e732203edb5e97f5ac8bc93a0e85cd16b668472413d355a98c1a81a3f074f6fe890d7576193a"}, {0x98, 0x103, 0x3, "453b22ece4ff06a0f0dd1c86174cb9c92dc955156746357b4f458ab56b64de125067821fc65d0c299a1ba0056e19b7c641774e2ccdd7f654d911c53f00ddd379b384b08578ac8c5307ae6eee8a1c7c23378e24431c81eb409a485c2ac20749eb9a2e11510d88cbd8ff4ad1f7bf4c8a0e5bb0826e25f1cdfff954555f64c4be5f3b54"}, {0xb0, 0x10f, 0x8, "1c984c680483fae98f618d1be84c8e0fc54054967b821f036fac8c5f0c9ebf648601a2ad4c3ddb205179ec080e4069f28b7d35e80cb328905cfe0cd5c2f0a2252a1567a7a6475e6b9411cdd4fb478508180c496b9d6d2acb75e6433d09183f52c0e5a01f8b3fe8562b893f29d7a28459b86809d433913b20621cddd659f5ebc20bceae67e1cc18990852cfb1a51197dd3583a6c2c07e76ade6ef0a34a947dd"}, {0xf8, 0x104, 0xffffff00, "5d68670c36626d8ad45997a0dbd2508bd2c3635203a0a1dbec50a385ce1f952bd779b8fecef05bfc4f1161c239d136bb64a242c8e9b5d677416a857d8646e71f2ab0f814bdf01ed95668bc9d46ac8a5e5b54169ea72bc53d9587ed167e05e7740773529a20442d96e29bd4ef6cfee4b9fc2fd252972fb8061bd9831506c7cab6bbb7a91c64e35095f27f9899b86f2061df03ca345d63489f3f4d5d14c1d955ddd1b14d4c6bba957513a09d908f48048fe5cd1a92b53fc432c04eb175e7def79cf805ad18c8fbe19fd55009f7c9c4229d60964906eda202ea9f994bafea8534a65bec30"}, {0xf8, 0x3a, 0x9, "8d2d43017abf07b2cba98df4e0bc520b7de5b7c07382ec7d1bb4f55f3b7d3957ec3670fedf0b57812c61f79749d0b0db8f02f5efb144125fff22e6160e3c8784d5c08608f300d04b88b989c5a527c9086f4d8600ef58ae2cc8c726dec38a4cda936f823acbb5672e74b65f51a4958a743c00646f2193177c7ba478c1450d65c20a58ef237661dcb69d68652407def070583f7e0158599459e01b52342d2b909dd1a0c9008daf6869eff1ac4675edbe8b866f1ab535632ef91bc284f36d0d5a6e1e3b7f18f35069e5b82299f80e892df21c63ecdc73dcdfd209d63fb4df522021733d043ab86934"}, {0xc8, 0x10d, 0x5, "cd30ddc989d584228a0f9dc829a7adf75bf696fd125aae660aaa3c69acfce0b461298a8783d714fb3647fa1eab32394fbbeed0ffc543d21d3a40344792a9c296160e128238c4bf8a019488d36a32cdb8665cebda734fe10e6703b32fa745da548766979fd13554f14a79073c530db813a3f6cddee6a54c6bbfbc7f044721d9be77cdeaa1d7ebc99bff8bb8e844705dc5c8d327d27497b71d5691c965cbdc8558363068dc7530cd1299b87785c918c2a613a320442143"}], 0x608}}], 0x5, 0x10) ppoll(&(0x7f0000000040)=[{r3, 0xb004, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x63, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x994c6baf52628e58) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) 21:21:26 executing program 1: unshare(0x40000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x5) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), 0x4) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000009c0b7ccf2d7d05351bc6bb31b38f149d95f34fd492463bfe7e63a221309a28eeebbfce12a16169cb956e11fa7aab8b8fd1ac87337aedc18485ab6b570e673cf83cbf5ca5fcae6e0af5de3978e8ed9dae63be3a8e839c033fd7d1d0be762b221aa4a9f01f43d7a2ff0103c0f545232cb1ebad410ecd69000a0fcd94b5", @ANYRES16=r4, @ANYBLOB="08002cbd7000fedbdf2505000000140002800800060007000000080007000500000008000500010000806400038006000400c90a000008000500ac1414bb060007004e23000008000100f0000000080001000000000014000600fc010000000000000000000000000000050008000400000014000600fc01000000000000000000a45160cf6f308b000000000006a16f1332cf55d2340cee26a4ff183679864a7075939632825069b19c3f2f116967756af65a73228f0bb6a5d0849b88b358bb"], 0x94}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x19, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2000}) 21:21:26 executing program 2: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="293a259dc80b614e645a750b7a5e44596b355db4214b0db880c39b2f641aa42c4b4be0975912b7eafa7b73cac19cee37826f97940c14d6baccaf9046a92c5fa11bdc7067e2f4786e02947a0afb36a6a41fa3472350ba50b4a6cb8fc70d770c70e7244e66684e4e06acc4e2656d3bed77b0f5b01ccd0cdddc45e7b410f10b535b59742f3dd621fce895170ea2ce4ef57025ed6a6736c28fa26d6023d6f3f205ff852743e53779a256b25d14323dcdf22e9eebd9dafd06d8e5bf8a4b295c94bd50fb6b6c324c6fd054e3f0ccfc71a993818b3e92a5f0b077c77eca70424735c9273aab20a3f43965b93221eac833d1cd168638ffe44ca3b52e3746ac76ed68b589") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x84}}, 0x0) 21:21:26 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44c, 0x3f3, 0x100, 0x70bd2b, 0x25dfdbfe, {0x4, 0x2, 0x19, [0x40, 0x2, 0x80, 0x8000, 0xb5ac, 0x1, 0x20, 0xfffffffe, 0x4, 0x800, 0x65, 0xffff, 0x8, 0x3ff, 0x394, 0x80, 0x4, 0x81, 0x6, 0x8, 0x0, 0x3, 0x4, 0x5, 0x1000, 0x1, 0x101, 0xff, 0x20, 0x5, 0xffffffff, 0x9, 0xfa, 0x5, 0x9a9, 0xa796, 0x5, 0xd8, 0x7, 0x2, 0x5, 0xfffffc9d, 0x1, 0x8, 0x6, 0x2, 0x1, 0x80000000, 0xe73, 0xfffffff9, 0x960, 0x8, 0x80000000, 0x2, 0x3, 0x20, 0x401, 0x0, 0x8, 0x80, 0x40, 0xfff, 0x81, 0x6], [0x77, 0x800, 0xf23, 0x200, 0x1f, 0x5, 0x2, 0x3ff, 0x0, 0x1ff, 0xc92, 0x40, 0xcd, 0x100, 0x25, 0x9, 0x5, 0x8000, 0xafd, 0x9, 0x914, 0x3, 0x40, 0x7, 0x4, 0xc, 0x5, 0x1000, 0x3, 0x2, 0x79, 0x6, 0x0, 0x891b, 0x4, 0x1f, 0x6, 0x1, 0x6c0, 0x2, 0x6000000, 0x1, 0x7, 0xffff, 0x6, 0xeac, 0x2, 0x5, 0x100, 0x4, 0x40, 0x3, 0x6, 0x6, 0x9, 0x9, 0x0, 0x8, 0x3, 0x5, 0x8001, 0x4, 0x4, 0x7], [0x80000000, 0x10000, 0x7, 0x2, 0x5, 0x8, 0x80, 0x2, 0x8, 0x3, 0x3ff, 0x0, 0x1c, 0x7, 0x0, 0x200, 0x200, 0x1, 0x3, 0xbc1e, 0x5, 0x80, 0x5, 0x40, 0x5, 0x7, 0x23, 0x0, 0x5, 0xad, 0x5, 0x0, 0x1, 0xa342, 0x800, 0x8000, 0x10000, 0x1, 0x8, 0x80000000, 0x5, 0x1566, 0xa8e, 0x5, 0x7, 0x1ff, 0x5, 0x5, 0x23a2, 0x6, 0x6, 0x4, 0x6, 0x2, 0x7fffffff, 0x4, 0x6, 0x8001, 0xdc, 0x4800000, 0x7, 0x7f, 0x6897, 0x1], [0x25, 0x9, 0x7fff, 0xb7ad, 0x6, 0x1f, 0x6, 0x6, 0xffffffff, 0x1, 0x7fffffff, 0x1, 0x2, 0x2fd, 0x0, 0xfffeffff, 0xf43d, 0xac0, 0x9, 0xb109, 0x3ff, 0xf7f, 0x0, 0x1000, 0x0, 0x6, 0x8, 0x3, 0xd830, 0xfffffffd, 0x101, 0x4, 0xffffffff, 0x1ff, 0x6, 0x7fff, 0x2, 0x1, 0x8, 0x7, 0x1, 0x69, 0x9, 0x7, 0x101, 0x7, 0x2dc00000, 0x2000000, 0x3ff, 0x4, 0x5, 0x6, 0x0, 0x7, 0x80000000, 0x8, 0x4, 0x9, 0x1, 0x10001, 0x1ff, 0x80000001, 0x2, 0x101], 0x29, ['cgroup.controllers\x00', '/\x00', 'cgroup.controllers\x00', '\x00']}, ["", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004813) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000280)={{0x2, 0x0, @reserved="b387a379f82b7bdd6742d837220231221afdc33ef82a6b5c7ea0c8037edc1ecb"}, 0xc7, 0x0, [], "3b785a5b340e31dac53f06585319a237ef5c27b5a097d2d7d50639b652ea0d096739c5851ca8f676290c92f03b6002812a14f780954720883b7933c8823157bee781eaccf68727beff46cbf8ce8a1ddcbf6625371cb6b8e20b02e8fc310802e4e3aeb9809cad8ad8cfcec48b097b6dafe2241717c0723146175d0809c31a18e4e281b9940de76754b30b45b99971876095c57fc5cf3979f4a9f88269e20f60fb5a80d0bc203ae0a189fe817cb52c38933b6fb975b4604382fb8c116358619dffcf93f8df37f61c"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x7, 0x7, 0x800, 0x7}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000001) [ 1425.895725][T27557] IPVS: ftp: loaded support on port[0] = 21 [ 1425.940298][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1425.940314][ T27] audit: type=1804 audit(1598995286.919:1434): pid=27561 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1588/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 [ 1425.971545][T27568] IPVS: ftp: loaded support on port[0] = 21 21:21:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe000000000000001c00910ec1ae9b89ccea2f9c43cb975fce"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x7, 0xf1, "2ddc9611282a9a3f87c55ffd28570d6a645b38c58e20b6de2353bb217d1ef4703668827d6dfac0c54b0c329d764bdda096e941e47cc2ddc6b54e31b6355fc9100953d712cb0f3b11f9df8d7e0e5261e6a15c3631a3262fe7c77d0d398352a11c1a689d31a7d4bbc77b48adf31a9e9a5e9bfcca53f11c6cb0ae45b00aecd9bad15cf5441be40345e6d3fb204c8e3f9ca8015a0c5c8ac60070c20ad0572223d714ed7493b3cea44bbdd715ffca8401cef424fbaf58b7272a34f7634a28202ba2bd3d8e7d1a3e5998ff2bf3177d92285424de930e3c3235c8649a4bfb1862ea27dfb6665c265b86b73180d68388c2f0cd5664"}, 0xf9) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) [ 1426.016847][T27557] lo speed is unknown, defaulting to 1000 [ 1426.132243][T27568] lo speed is unknown, defaulting to 1000 [ 1426.216510][ T27] audit: type=1804 audit(1598995287.189:1435): pid=27567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1588/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 21:21:27 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) [ 1426.386354][ T27] audit: type=1804 audit(1598995287.189:1436): pid=27561 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1588/cgroup.controllers" dev="sda1" ino=16383 res=1 errno=0 21:21:27 executing program 0: unshare(0x6c060000) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept$inet6(r0, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000080)) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003340)=[{{0x0, 0x4000000000000, 0x0}}], 0x600, 0x0, 0x0) recvmsg$can_j1939(r4, 0x0, 0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) 21:21:27 executing program 2: unshare(0x40000000) mmap(&(0x7f0000750000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f00000007c0), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000080)={{0x0, 0x4, 0x800, 0xff9, 0xff, 0x20, 0x3, 0x40, 0xfffffc01, 0xa76d, 0x2, 0x401, 0x9, 0xf12, 0x7}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = accept$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000001800)={{r6}, "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000800)={r4, 0x457abd2b}) [ 1426.641029][ T27] audit: type=1804 audit(1598995287.619:1437): pid=27632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1589/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 [ 1426.705820][T27639] IPVS: ftp: loaded support on port[0] = 21 [ 1426.735095][T27637] IPVS: ftp: loaded support on port[0] = 21 21:21:27 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468000000001800028c0014000100000000f36a8e71ae134e0534cdfdf62bd6d65f1caec5730e8a0ff10a38f558e7eb29f8bbe3d5ce176a019baeff4a29ca9117ad34a7", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x49, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000020000000000040000000700010066770000400002003c000400380001000c000100736b626564697400240002800600040000000000180002001600000000000000000000000000000000000000040006000600050000000000d91f1cb61b2a440b7c5203faf542f3cabaca5c9814ab7500fcdf633039d076eb104ce0d547ff29e723c7199a2596767e5be9efbc121b1b09acd2c48db47d40ee0623c6f578ba3871aa9b1ccce26d4d6ba061739ad151b75a55194bbb303ff03d37761e76b5e4ab8e79b079ce6af7f40a73ce6b4390b8dbbf4e53b1f559aa3c6b9d0510cd92a12e99db596489808ceb1851b3ba4be9e05f65a1eb7f9f6e29af56b8703dfe72498ae504ce35ac7db18a3aaf8764d57655a00353a75a360c07738c00000000"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x0, 0x4004000) [ 1426.853634][T27639] lo speed is unknown, defaulting to 1000 [ 1426.888609][T27637] lo speed is unknown, defaulting to 1000 [ 1426.933091][ T27] audit: type=1804 audit(1598995287.909:1438): pid=27634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1589/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 21:21:28 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x20) [ 1427.030547][ T27] audit: type=1804 audit(1598995287.909:1439): pid=27632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1589/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 [ 1427.259160][ T27] audit: type=1804 audit(1598995288.229:1440): pid=27693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1590/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 [ 1427.313305][T27637] IPVS: ftp: loaded support on port[0] = 21 [ 1427.392688][T27637] lo speed is unknown, defaulting to 1000 [ 1427.482673][ T27] audit: type=1804 audit(1598995288.459:1441): pid=27698 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1590/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 [ 1427.618007][ T27] audit: type=1804 audit(1598995288.459:1442): pid=27693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir612126113/syzkaller.R8szZs/1590/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 [ 1428.235550][ T114] tipc: TX() has been purged, node left! [ 1428.242670][ T114] tipc: TX() has been purged, node left! [ 1428.248942][ T114] tipc: TX() has been purged, node left! [ 1428.255015][ T114] tipc: TX() has been purged, node left! [ 1428.261224][ T114] tipc: TX() has been purged, node left! [ 1428.267972][ T114] tipc: TX() has been purged, node left! [ 1428.275002][ T114] tipc: TX() has been purged, node left! [ 1428.281108][ T114] tipc: TX() has been purged, node left! 21:21:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000120000000000000000000000040000000100000000000000000000000000000000000000feffffff00"/56, @ANYRES32=0x0, @ANYBLOB="e311b619d87a6e70e11ea5b7226847904c7fe61c3a25a836396241ea6109cafbed602dc3b97f7387c32396da70b29675503f5d54b192ec9f11a28d11bab3176c98"], 0x4c}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1000000005220c0825bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d7b18f169e34f3aa50de655e425a483740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 21:21:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r2 = accept4$netrom(r1, 0x0, &(0x7f0000000180), 0x800) sendfile(r1, r2, 0x0, 0x7f) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 21:21:29 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002800120009004896bcf8010076657468"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040891}, 0x24000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x8, 0x2, [@TCA_RSVP_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:21:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110025013700000000000000d2000000", @ANYRES32=r5], 0x20}}, 0x0) connect(r1, &(0x7f0000000100)=@can={0x1d, r5}, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @reserved="00c0a937fd85ec222933c7b01459a73ccb8ba44e3c3526e242b3faff4ef8decd"}}) mmap(&(0x7f00006a6000/0x2000)=nil, 0x2000, 0x5000000, 0x12, 0xffffffffffffffff, 0x7c1d3000) 21:21:29 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x3841) 21:21:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0x401) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x20) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r2, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x80, 0x800) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000240)=0x1, 0x4) sendfile(r2, r1, 0x0, 0x100000001) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9}, 0x8) write$binfmt_aout(r1, &(0x7f0000000280)={{0x0, 0x40, 0x6b, 0x1b7, 0x120, 0x8, 0x3b0, 0x7f}, "a9c790f926d1055f19361efdb5d9b4e0a66c39a7a8ae31516722c01388f6c927815a03f5c64997c2c6742eaaf21185fc33f1c9b11d6fea3d90a03c1cd5ce99190af11323d01ffef94b44bb5ebb702009a0c9ed85a24c32d6670ccd95164968515a31a604b3888b6184b5d9e1cc7103f9d924ae99b37e9b203647fb94037e19e43d3c40284dd3e434044a5a3fbcb4fd0b4ab740d1fb82e8b7fc44c80a53fd64e0b6697f03afe061e86a212075897fcb724e074838d7ef56f95c534da6b2fd433326df717b8569b1f865cc2476ef7e9fb077e4403fd39c", [[], [], [], [], [], [], [], [], [], []]}, 0xaf6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 21:21:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}}, 0x20040004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000004000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0112000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) [ 1428.972343][T27744] IPVS: ftp: loaded support on port[0] = 21 [ 1429.019005][ T27] audit: type=1804 audit(1598995289.999:1443): pid=27739 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir912935384/syzkaller.gjdT2c/1258/cgroup.controllers" dev="sda1" ino=16213 res=1 errno=0 [ 1429.049332][T27736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1429.079686][T27744] lo speed is unknown, defaulting to 1000 21:21:30 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 21:21:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x84, 0x10, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'ip6gre0\x00', {0x401}, 0x6}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f00000001c0)=0x84) r2 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff2700120009000100766576804520312fe2945e746800000000180002001400f5a287690000", @ANYRES32=r2, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0xa, 0x2, 0x3719a6b41f07dde3, 0xc}, @ldst={0x1, 0x2, 0x2, 0x3, 0xf, 0x10, 0x1}, @jmp={0x5, 0x1, 0xa, 0x3, 0x3, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0x4, 0x9, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @generic={0x0, 0xd, 0x1, 0x4, 0x4}, @map={0x18, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x20, &(0x7f0000000440)=""/32, 0x40f00, 0xc, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x6, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@setlink={0x60, 0x13, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1489, 0x21001}, [@IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x60}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x0, 0x6007}, @void, @llc={@llc={0xd4, 0xe0, "8ce6", "17a0e3282b42880825efe88de57730eb2c389a6a941a3ef6fb40da69843972d28bd213110b62006f3683a0b0a3f3b2d224ef1792ef1aebd360a5c80a19df604fb68e86f755e9128075406bebd51bc74db5dd570bdcc2f380d4ae5c6e2e7d033171"}}}, 0x69) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000680)="faa3b81fd5899ec13b5c8879d18330779d630428afe1891312ce95981bbe789983ec7666d172f143cd805180f4265a8a21a0edac04bb0872faed505a9efccf7125512420111013f15b95db9dc6bda7ea1c2fbb91a5623e5cef4209d69eeb65d59b06d33767c9c4f61b632cca4be08bbbb687ab84fce17293e273676c2beb7ac137c865af55ef11627efb41c724bd5995974ad13171c66099ca0f02e9865b5549f333986f4163bceab107c0c150a1b07907316ad14cdc3bb5f34490a8b2f44ed9379c04d0b1aac85a523d1cefa2cfd53f321c5cdb610a594a752c77de947d34ef436d03a6", 0xe4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f0000003a40)=ANY=[@ANYBLOB="720208009e3f2ff2900fe55408d8a33438ad303895050b362feee6babf4e870d16f7eb9eccd741b4847942a425b7227201d99a7f00daea010e3e7c3b6baf5e5bd37ef40c798368fabca5ffffffff000000002a0cb2998b5c691479b01958c3eaa6d36af39f83ea63ec502bee35bb49343d0744757c3986ae44c37bac55ca37e4aeccfd3ec9c8a8ab01346a05927580baf4b3e9f765603f851e8df4fcac2f1d2997da40fd858dd101228c6a3317bda9311cd2f66b5fe1fb1044040631b2de3946abea8c1c699fa491dc7d829ebabf8de376ad3771c39bf76ba2ae273dbbe87b3609e4b900", @ANYRES16=r5, @ANYRES32=0x0], 0x770}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x410}, 0x200401c0) 21:21:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0xffffffff, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@nfc, 0x80, 0x0}}], 0x1, 0x2022, &(0x7f0000000100)={0x0, 0x989680}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="02000000000000000000010000000800020000000000"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 21:21:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0xa, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000240)={{r0}, 0x0, 0x0, @unused=[0x9, 0xee5b, 0x3, 0x5], @name="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"}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1], 0x1}}, 0x76526366c99c0ba2) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000200)=0x57) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)={0x46, 0x8, 0x6, 0xb, 0x9}) r4 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x84, 0x10, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000100)=""/59, 0x3b, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x84, 0x10, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r2, r6, 0x0, 0x106fffffe) 21:21:30 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000200)="26776f7aab3e75b8e0075ed72f74dd066dad3885552741dcca41b18334ff165b9cd33398a7455ba8f03aa0417560a14b2d2c38c4a8e442b9937b97f43d45f9ddbb4c13c0e073fd0c5ef3623a7a7f4dbf64052db695841affe7540643888509c1abb394dbe1f3ff5390b0e8b064b2bc3f9d6c27fd6d42187c6883a1a600718dea198b6b8206c5be96c6547308b2cc0d5be558b653f6e2e0e3548e75954bb6f022684a1a177897feba8cde440ad08fb9730510480fb85aefde1b7ef5b8082ffab81b8efb70157953c8ceeb3facd6c8ba66f6e9d727d7fe104a2fb6df886d1a", &(0x7f0000000300)=""/236}, 0x20) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) r3 = socket(0xa, 0x5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x84, 0x10, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x0, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x3}, 0x6b60dddf00031dba, 0x1}, {0x0, 0x2, {0x2, 0x1}, {0x2, 0xf0, 0x3}, 0x1}, {0x3, 0x2, {0x0, 0x1, 0x2}, {0x0, 0xff, 0x1}, 0x0, 0x1}], 0x60) getpeername$qrtr(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xc) [ 1429.798651][T27794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1429.816195][T27744] IPVS: ftp: loaded support on port[0] = 21 [ 1429.931737][T27744] lo speed is unknown, defaulting to 1000 [ 1429.937729][ T9306] ------------[ cut here ]------------ [ 1429.945057][ T9306] Unexpected user alpha2: B [ 1430.000536][ T9306] WARNING: CPU: 1 PID: 9306 at net/wireless/reg.c:418 restore_regulatory_settings+0x212/0x1560 [ 1430.072133][ T9306] Kernel panic - not syncing: panic_on_warn set ... [ 1430.078768][ T9306] CPU: 1 PID: 9306 Comm: kworker/1:15 Not tainted 5.9.0-rc1-syzkaller #0 [ 1430.088135][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.098216][ T9306] Workqueue: events_power_efficient crda_timeout_work [ 1430.104985][ T9306] Call Trace: [ 1430.108288][ T9306] dump_stack+0x18f/0x20d [ 1430.112644][ T9306] panic+0x2e3/0x75c [ 1430.116550][ T9306] ? __warn_printk+0xf3/0xf3 [ 1430.121171][ T9306] ? __warn.cold+0x5/0x4a [ 1430.125517][ T9306] ? __warn+0xd6/0x1f2 [ 1430.129602][ T9306] ? restore_regulatory_settings+0x212/0x1560 [ 1430.135679][ T9306] __warn.cold+0x20/0x4a [ 1430.139935][ T9306] ? restore_regulatory_settings+0x212/0x1560 [ 1430.146013][ T9306] report_bug+0x1bd/0x210 [ 1430.150449][ T9306] handle_bug+0x38/0x90 [ 1430.154619][ T9306] ? __warn_printk+0xc6/0xf3 [ 1430.159217][ T9306] exc_invalid_op+0x14/0x40 [ 1430.163733][ T9306] asm_exc_invalid_op+0x12/0x20 [ 1430.168601][ T9306] RIP: 0010:restore_regulatory_settings+0x212/0x1560 [ 1430.175282][ T9306] Code: 44 89 ee e8 b0 00 fd f9 45 84 ed 0f 85 68 07 00 00 e8 62 04 fd f9 41 0f be d4 40 0f be f5 48 c7 c7 c0 af 17 89 e8 50 15 ce f9 <0f> 0b e8 47 04 fd f9 48 8b 1d 50 4b 25 03 48 b8 00 00 00 00 00 fc [ 1430.194900][ T9306] RSP: 0018:ffffc900086b7c20 EFLAGS: 00010286 [ 1430.200975][ T9306] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 1430.208955][ T9306] RDX: ffff8880967e4200 RSI: ffffffff815dafc7 RDI: fffff520010d6f76 [ 1430.216957][ T9306] RBP: 0000000000000042 R08: 0000000000000001 R09: ffff8880ae7318e7 [ 1430.224932][ T9306] R10: 0000000000000000 R11: 0000000030333954 R12: 0000000000000000 [ 1430.232911][ T9306] R13: 0000000000000000 R14: ffff8880a7570800 R15: ffff8880ae735600 [ 1430.240910][ T9306] ? vprintk_func+0x97/0x1a6 [ 1430.245520][ T9306] ? set_regdom+0xe80/0xe80 [ 1430.250034][ T9306] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1430.255243][ T9306] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1430.260453][ T9306] ? lock_is_held_type+0xbb/0xf0 [ 1430.265404][ T9306] crda_timeout_work+0x1d/0x30 [ 1430.270181][ T9306] process_one_work+0x94c/0x1670 [ 1430.275161][ T9306] ? lock_release+0x8e0/0x8e0 [ 1430.279847][ T9306] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1430.285230][ T9306] ? rwlock_bug.part.0+0x90/0x90 [ 1430.290186][ T9306] worker_thread+0x64c/0x1120 [ 1430.294967][ T9306] ? __kthread_parkme+0x13f/0x1e0 [ 1430.299999][ T9306] ? process_one_work+0x1670/0x1670 [ 1430.305206][ T9306] kthread+0x3b5/0x4a0 [ 1430.309280][ T9306] ? __kthread_bind_mask+0xc0/0xc0 [ 1430.314393][ T9306] ? __kthread_bind_mask+0xc0/0xc0 [ 1430.320468][ T9306] ret_from_fork+0x1f/0x30 [ 1430.326593][ T9306] Kernel Offset: disabled [ 1430.331065][ T9306] Rebooting in 86400 seconds..