screwing up backlog 18:02:15 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x6, &(0x7f0000000100)=0xac47e17a14ae4701, 0x112) 18:02:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1d, 0x0, &(0x7f0000000240)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x1d, 0x0, &(0x7f0000000240)) r2 = accept4(r0, &(0x7f00000018c0)=@tipc, &(0x7f0000000040)=0x80, 0x40000) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001980)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1d, 0x0, &(0x7f0000000240)) accept(r4, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x80) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000", @ANYRES16=r6, @ANYRES32], 0x154}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000180)={0x2, 0x1, 0x1, 0x3}, 0xc) 18:02:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e0000001f00055bd25a80648c63940d0124fc6010000f20ea9565ae66405b08fdd2b71611400a000200020000d1", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 2432.337218][T14561] vcan0 speed is unknown, defaulting to 1000 [ 2432.443266][ T4602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2432.496111][T14587] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2432.580292][T14587] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2433.064535][T14564] vcan0 speed is unknown, defaulting to 1000 [ 2433.330581][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2434.370012][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2434.607755][ T4602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:18 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c08100041490000001ffcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f000000050033000200000008003400020000000500350005000000"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 18:02:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x74, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @empty}]}, @fragment]}}}, 0xa6) 18:02:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cubic\x00', 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 18:02:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x75}, [@call={0xf}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 18:02:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) 18:02:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c08100041490000001ffcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f000000050033000200000008003400020000000500350005000000"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) [ 2435.271411][T11971] tipc: TX() has been purged, node left! [ 2435.289139][T14640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2435.299020][T11971] tipc: TX() has been purged, node left! [ 2435.357628][T14651] IPVS: ftp: loaded support on port[0] = 21 [ 2435.399138][T14639] IPVS: ftp: loaded support on port[0] = 21 [ 2435.407266][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2435.438156][T14657] IPVS: ftp: loaded support on port[0] = 21 18:02:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x75}, [@call={0xf}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2435.510906][T14653] IPVS: ftp: loaded support on port[0] = 21 18:02:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x75}, [@call={0xf}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) [ 2435.665233][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x75}, [@call={0xf}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 18:02:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x74, 0x3c, 0x0, @local, @mcast2, {[@dstopts={0x0, 0x4, [], [@ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @empty}]}, @fragment]}}}, 0xa6) 18:02:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 2435.758762][T14651] vcan0 speed is unknown, defaulting to 1000 18:02:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) close(r1) [ 2435.894717][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2436.318499][T14639] vcan0 speed is unknown, defaulting to 1000 [ 2436.449884][T13543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2436.621600][T14657] vcan0 speed is unknown, defaulting to 1000 [ 2436.769144][T14653] vcan0 speed is unknown, defaulting to 1000 18:02:19 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c08100041490000001ffcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f000000050033000200000008003400020000000500350005000000"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 18:02:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) 18:02:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000080)="e987aa680c7218c887fe8846c0a54e0699", 0x11}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x170, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3eaa5d55553ddc6b35ddc9b88393c45f1500f5a4e8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "60faebd623c991829889934239e23b4a362be28a1896610afb2afbbeee"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x170}}, 0x0) 18:02:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) 18:02:19 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x350, 0x280, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00', 0x0}, {'syzkaller1\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) [ 2437.117863][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2437.194835][ T29] audit: type=1804 audit(1597082540.149:3282): pid=14800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3121/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2437.279164][T14803] IPVS: ftp: loaded support on port[0] = 21 [ 2437.299454][T14796] IPVS: ftp: loaded support on port[0] = 21 [ 2437.364348][T14803] vcan0 speed is unknown, defaulting to 1000 [ 2437.489705][T13543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2437.647106][ T4602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2437.691339][T14796] vcan0 speed is unknown, defaulting to 1000 [ 2437.895917][ T29] audit: type=1804 audit(1597082540.849:3283): pid=14800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3121/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2438.522832][T13543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:22 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) accept(r0, 0x0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c08100041490000001ffcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="00082abd70e7fedbdf250f000000050033000200000008003400020000000500350005000000"], 0x2c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 18:02:22 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000680)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 18:02:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) 18:02:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000000)="ca", 0x1}], 0x1) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) 18:02:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) 18:02:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) [ 2439.306171][T14860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) [ 2439.416969][ T29] audit: type=1804 audit(1597082542.369:3284): pid=14857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3122/cgroup.controllers" dev="sda1" ino=16379 res=1 18:02:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x4, 0x0, &(0x7f0000000200)) [ 2439.478890][T14875] IPVS: ftp: loaded support on port[0] = 21 [ 2439.510893][T14868] IPVS: ftp: loaded support on port[0] = 21 [ 2439.542596][T14861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2439.557044][T14861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2439.563729][ T29] audit: type=1804 audit(1597082542.479:3285): pid=14861 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3111/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2439.578892][T13543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:22 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0xa0000019}) [ 2439.673810][T14868] vcan0 speed is unknown, defaulting to 1000 [ 2439.681486][T14861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:22 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x1, 0x7, 0x401}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) [ 2439.726851][T14861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2439.737593][ T29] audit: type=1804 audit(1597082542.629:3286): pid=14883 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2797/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 2439.806224][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2439.831356][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:22 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0xa0000019}) [ 2439.891538][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) [ 2439.957481][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2439.999582][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.208593][T11971] tipc: TX() has been purged, node left! [ 2440.218330][T11971] tipc: TX() has been purged, node left! [ 2440.245822][T11971] tipc: TX() has been purged, node left! [ 2440.271734][T11971] tipc: TX() has been purged, node left! [ 2440.319957][T11971] tipc: TX() has been purged, node left! [ 2440.439739][T14875] vcan0 speed is unknown, defaulting to 1000 18:02:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) 18:02:26 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0xa0000019}) 18:02:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) 18:02:26 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:02:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) [ 2443.226067][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:02:26 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000075000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x29811, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 2443.275738][ T29] audit: type=1804 audit(1597082546.229:3287): pid=14980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3123/cgroup.controllers" dev="sda1" ino=16363 res=1 18:02:26 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000200)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0xa0000019}) [ 2443.377899][T14981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2443.408959][ T29] audit: type=1800 audit(1597082546.259:3288): pid=14980 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16363 res=0 18:02:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) 18:02:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2443.583938][ T29] audit: type=1804 audit(1597082546.259:3289): pid=14976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3123/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 2443.733016][ T29] audit: type=1804 audit(1597082546.349:3290): pid=14975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3112/cgroup.controllers" dev="sda1" ino=16365 res=1 18:02:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in, 0x0, 0x0, 0x106, 0x0, "98d3340600c7aa11897ecaab876eab7957688dc5656be8412f2802e944af9b373be2666b66577017e1e49e6421975dd5749393ad08f139a68f00"}, 0xd8) 18:02:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) [ 2443.885875][ T29] audit: type=1804 audit(1597082546.359:3291): pid=14991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2799/cgroup.controllers" dev="sda1" ino=16364 res=1 18:02:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x128, 0x0, 0x128, 0x0, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@uncond=[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x3, 0x0, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) [ 2444.035172][ T29] audit: type=1804 audit(1597082546.509:3292): pid=14997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1443/cgroup.controllers" dev="sda1" ino=16370 res=1 18:02:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x100000001) 18:02:27 executing program 0: socketpair(0x21, 0x2, 0x2, &(0x7f00000004c0)) 18:02:27 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000075000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x29811, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 18:02:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed}, 0xe) [ 2444.117073][T15018] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2444.130518][ T29] audit: type=1804 audit(1597082546.819:3293): pid=15004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3124/cgroup.controllers" dev="sda1" ino=16379 res=1 18:02:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fd}, 0x10) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x3fffffffffffe7d, 0x10122, 0x0) [ 2444.256132][ T29] audit: type=1804 audit(1597082546.929:3294): pid=14997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1443/cgroup.controllers" dev="sda1" ino=16370 res=1 18:02:27 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0xe5) [ 2444.393908][ T29] audit: type=1804 audit(1597082546.929:3295): pid=14992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1443/cgroup.controllers" dev="sda1" ino=16370 res=1 18:02:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) [ 2444.556909][ T29] audit: type=1804 audit(1597082547.369:3296): pid=15026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1444/cgroup.controllers" dev="sda1" ino=15763 res=1 18:02:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xb8a2, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x40) 18:02:27 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140), 0x8) [ 2444.762542][T13546] net_ratelimit: 75 callbacks suppressed [ 2444.762549][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='$'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000040)={'syzkaller1\x00'}) 18:02:27 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000075000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x29811, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 18:02:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed}, 0xe) 18:02:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0xd, 0x400}, 0x3c) 18:02:28 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="bb416e4559aeaaaaaaaaaabb86dd601d9f0800302f0020010000000000000000000000000001fe8000000000000000000000000000aa0000883e003090785e67"], 0x0) 18:02:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x0, 0x0, 0x7fffffffffffc8b}) 18:02:28 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="bb416e4559aeaaaaaaaaaabb86dd601d9f0800302f0020010000000000000000000000000001fe8000000000000000000000000000aa0000883e003090785e67"], 0x0) 18:02:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fd}, 0x10) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x3fffffffffffe7d, 0x10122, 0x0) 18:02:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x301, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x600}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 18:02:28 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="bb416e4559aeaaaaaaaaaabb86dd601d9f0800302f0020010000000000000000000000000001fe8000000000000000000000000000aa0000883e003090785e67"], 0x0) 18:02:28 executing program 2: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f0000000000000000000075000400000000000900020073797a30"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x29811, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000ffff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 18:02:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3082}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 2445.808923][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:28 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="bb416e4559aeaaaaaaaaaabb86dd601d9f0800302f0020010000000000000000000000000001fe8000000000000000000000000000aa0000883e003090785e67"], 0x0) 18:02:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r6], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 18:02:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed}, 0xe) 18:02:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3082}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 2446.028450][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:29 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e80000000003000600071f000002004011e0060000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) [ 2446.206176][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3082}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 18:02:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x138, 0x0, 0x0, 0x0, 0x130, 0x250, 0x228, 0x228, 0x250, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x118, 0x138, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@local, @loopback, [], [], 'veth1_virt_wifi\x00', 'wg0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) [ 2446.512665][T15107] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 2446.568560][T15107] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fd}, 0x10) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x3fffffffffffe7d, 0x10122, 0x0) 18:02:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3082}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 18:02:29 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000280), 0x10) [ 2446.762360][ T4602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2446.773650][T15107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2446.814198][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2446.848658][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb250e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 18:02:29 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000050000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) [ 2446.936622][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="0200000000000000", 0x8}}, 0x0) [ 2447.138034][T15138] vcan0: tx address claim with different name [ 2447.165717][T15140] vcan0: tx address claim with different name [ 2447.222015][T15133] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2447.238218][T15133] team0: Device ipvlan1 is up. Set it down before adding it as a team port 18:02:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r6], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 18:02:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed}, 0xe) 18:02:30 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000050000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) 18:02:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0xf, {0x2, 0x0, @empty}}) 18:02:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb250e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) [ 2447.432091][T15155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x24, 0x0, 0x0) [ 2447.560246][T15160] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2447.578420][T15160] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2447.619895][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fd}, 0x10) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x3fffffffffffe7d, 0x10122, 0x0) 18:02:30 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000050000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) 18:02:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb250e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) [ 2447.882473][T23919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:30 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000050000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) [ 2447.961484][T15172] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2447.969696][T15172] team0: Device ipvlan1 is up. Set it down before adding it as a team port 18:02:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000002c0)="e2", &(0x7f0000000340)=""/54}, 0x20) 18:02:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb250e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 18:02:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r6], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 18:02:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000002c0)="e2", &(0x7f0000000340)=""/54}, 0x20) 18:02:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00', @in=@broadcast, @in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xbc}}, 0x0) [ 2448.192772][T15189] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 2448.231705][T15189] team0: Device ipvlan1 is up. Set it down before adding it as a team port 18:02:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020d0000100000002f3144e80000000003000600072000000200a465e0000001000000f500000000080012000200010000000000000000e02f006ce00203009f7eae02000000adb20200000000152c000000000000000001020014bb000000000000000000000000030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) [ 2448.283198][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000002c0)="e2", &(0x7f0000000340)=""/54}, 0x20) 18:02:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, r1, 0x905, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x38}}, 0x0) [ 2448.416485][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x1000009, 0x601, 0x1}, 0x40) 18:02:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000021c0)=ANY=[@ANYBLOB="0000030000000000000060bc7d940f983c00fe8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfca) 18:02:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x5, 0x1}, 0x3c) 18:02:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000002c0)="e2", &(0x7f0000000340)=""/54}, 0x20) 18:02:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 18:02:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000940)=0x2, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) [ 2448.941397][T23919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r6], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r6}}, 0x24}}, 0x0) 18:02:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1eb) 18:02:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 18:02:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc8402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@remote}, {@broadcast}, {@empty, 0x7}, {@multicast2}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}, 0x7e) 18:02:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000250029080000000000000000050000000500110025"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 18:02:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x29, 0x0, 0x0) [ 2449.430776][T15256] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:02:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 2449.533755][T15258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2449.602095][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:32 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1fe, 0x0) 18:02:32 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31000000000000000000090c00003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) 18:02:32 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020702000800000000002000050015"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a0001"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000414"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x14) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) [ 2449.801582][T23148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000250029080000000000000000050000000500110025"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2449.909019][T15304] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 2449.917799][T15305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.931623][T15303] IPVS: ftp: loaded support on port[0] = 21 [ 2449.957632][T15308] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 2449.977344][T15305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.989858][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x10, 0x803, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 2450.239312][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2450.239327][ T29] audit: type=1804 audit(1597082553.190:3299): pid=15314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3140/cgroup.controllers" dev="sda1" ino=16370 res=1 18:02:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000250029080000000000000000050000000500110025"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 18:02:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x2, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x1a, 0x309, 0x5, 0x0, 0x9, 0x8, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000200)="390000001300254708bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff060604000000000000000002b05144ab537c54a49fd6f5c1dd15b9a4ac80e295c26bd811510f813a5a15ed3604b63308b30379e818e0903080b72b122b1860062ee9ead8d74de95082c96cc500b700000000000100ff9bae1b63ec3d01e637697e924a93642b32e72d2cd734ce0da6baf049e4ebb262a88510339e09fbea77e3f2c81e7bc1d232049be1b84fff713d42272a12ad2d8375423ecf58ebe323fe11442c4b836b67aa1fbba2be7c558ed752745075428e1db2350474399f6648255dd677c2fc8898c39fa7", 0xf7}], 0x1) [ 2450.416401][T15307] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2450.454148][T15303] vcan0 speed is unknown, defaulting to 1000 18:02:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @private}, 0x10) 18:02:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f000000bac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000400)=""/67, 0x43}], 0x1}}], 0x2, 0x0, 0x0) [ 2450.570419][T15331] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 18:02:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000250029080000000000000000050000000500110025"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2450.653401][T15332] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2450.713232][T15307] IPVS: ftp: loaded support on port[0] = 21 18:02:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 18:02:33 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) 18:02:33 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff9) [ 2451.214949][ T29] audit: type=1804 audit(1597082554.170:3300): pid=15352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2812/cgroup.controllers" dev="sda1" ino=15828 res=1 [ 2451.763551][T11971] tipc: TX() has been purged, node left! 18:02:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31000000000000000000090c00003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) 18:02:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="ae4a0000000000000000000000975476cb57c8e19ebf7e5eff0f03314330e27c305fb9bc407a9175", 0x28}], 0x1}}], 0x1, 0x0) 18:02:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, "a5a251481b449cd966c8abd4af5874811e02a081d6653a7539e2a42b79598690527bee015f8291e10d60b45206f4ac8455f3387d1579b53bf13a9672ca0b5bea7535178c16484e4c066cebf16ce26c4c"}, 0xd8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000000)=@udp=r2}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)="2afffbbb610bdff75721d989be39c44cd7a5916d4e13daa145074f4410dbb00ec4384ea6709c95fa3163a0fd5883c3360862892ddf09bac8c56862e17186515022", 0x0}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000340), &(0x7f0000000440)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={r0, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) 18:02:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x10, 0x803, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:02:35 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff9) 18:02:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x2, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x1a, 0x309, 0x5, 0x0, 0x9, 0x8, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000200)="390000001300254708bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff060604000000000000000002b05144ab537c54a49fd6f5c1dd15b9a4ac80e295c26bd811510f813a5a15ed3604b63308b30379e818e0903080b72b122b1860062ee9ead8d74de95082c96cc500b700000000000100ff9bae1b63ec3d01e637697e924a93642b32e72d2cd734ce0da6baf049e4ebb262a88510339e09fbea77e3f2c81e7bc1d232049be1b84fff713d42272a12ad2d8375423ecf58ebe323fe11442c4b836b67aa1fbba2be7c558ed752745075428e1db2350474399f6648255dd677c2fc8898c39fa7", 0xf7}], 0x1) 18:02:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100025080046f99ff4c3c99b102ef800", @ANYRES32=r5, @ANYBLOB="060000000000000008000a000f"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}}, 0x0) [ 2452.448579][T15386] validate_nla: 2 callbacks suppressed [ 2452.448589][T15386] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 18:02:35 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) [ 2452.539118][T15392] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2452.573671][T15393] IPVS: ftp: loaded support on port[0] = 21 [ 2452.616344][ T29] audit: type=1804 audit(1597082555.570:3301): pid=15384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3141/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2452.720763][ T29] audit: type=1804 audit(1597082555.580:3302): pid=15396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2813/cgroup.controllers" dev="sda1" ino=16360 res=1 18:02:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x10, 0x803, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:02:36 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff9) [ 2453.082875][T15395] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2453.269309][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x2, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x1a, 0x309, 0x5, 0x0, 0x9, 0x8, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000200)="390000001300254708bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff060604000000000000000002b05144ab537c54a49fd6f5c1dd15b9a4ac80e295c26bd811510f813a5a15ed3604b63308b30379e818e0903080b72b122b1860062ee9ead8d74de95082c96cc500b700000000000100ff9bae1b63ec3d01e637697e924a93642b32e72d2cd734ce0da6baf049e4ebb262a88510339e09fbea77e3f2c81e7bc1d232049be1b84fff713d42272a12ad2d8375423ecf58ebe323fe11442c4b836b67aa1fbba2be7c558ed752745075428e1db2350474399f6648255dd677c2fc8898c39fa7", 0xf7}], 0x1) [ 2453.372120][ T29] audit: type=1804 audit(1597082556.330:3303): pid=15412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2814/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2453.407093][T15400] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2453.409194][ T29] audit: type=1804 audit(1597082556.360:3304): pid=15413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3142/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2453.477897][T15400] bond0: (slave bond12): Enslaving as an active interface with an up link 18:02:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x10, 0x803, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 2453.767290][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2453.784738][T15456] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2454.078021][ T29] audit: type=1804 audit(1597082557.030:3305): pid=15467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3143/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2454.201281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.209616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.217972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.226285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.299995][T13545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.329770][T15462] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 18:02:39 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31000000000000000000090c00003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) 18:02:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)) 18:02:39 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000fff9) 18:02:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x2, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x1a, 0x309, 0x5, 0x0, 0x9, 0x8, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000200)="390000001300254708bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff060604000000000000000002b05144ab537c54a49fd6f5c1dd15b9a4ac80e295c26bd811510f813a5a15ed3604b63308b30379e818e0903080b72b122b1860062ee9ead8d74de95082c96cc500b700000000000100ff9bae1b63ec3d01e637697e924a93642b32e72d2cd734ce0da6baf049e4ebb262a88510339e09fbea77e3f2c81e7bc1d232049be1b84fff713d42272a12ad2d8375423ecf58ebe323fe11442c4b836b67aa1fbba2be7c558ed752745075428e1db2350474399f6648255dd677c2fc8898c39fa7", 0xf7}], 0x1) 18:02:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:39 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) [ 2456.234909][T15482] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 18:02:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) [ 2456.336261][T15493] IPVS: ftp: loaded support on port[0] = 21 [ 2456.373031][T23919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 18:02:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 2456.436299][T15482] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2456.446292][ T29] audit: type=1804 audit(1597082559.400:3306): pid=15487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2815/cgroup.controllers" dev="sda1" ino=16017 res=1 [ 2456.825484][T15497] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 18:02:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe368, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x78}}, 0x0) [ 2457.037153][T15493] vcan0 speed is unknown, defaulting to 1000 18:02:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000740)=@newsa={0x154, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1}, {@in6=@dev, 0x0, 0x6c}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) 18:02:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4088, &(0x7f0000001140)=0xff8) 18:02:40 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24008844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="a9", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) 18:02:40 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x12, @empty, 'veth1_to_team\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="4251cfc1ad77", 'ip6_vti0\x00'}}) 18:02:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x1c}, [@ldst={0x4, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:02:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31000000000000000000090c00003c0003000800400000000000140002006c6f000000000000000000000000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0) 18:02:40 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="e222b3bcb66b5d312645874e066bbfc29ba1bc649f5010f9c1ea9f6cc10881", 0x1f}], 0x1}}], 0x1, 0x0) 18:02:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) [ 2457.993833][T24296] tipc: TX() has been purged, node left! [ 2458.034536][T15561] IPVS: ftp: loaded support on port[0] = 21 18:02:41 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000080)={'bridge0\x00', @ifru_mtu=0x5}) 18:02:41 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000a00000000000e000000070001006677000020000200080001000000f2ff040003"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:02:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="e222b3bcb66b5d312645874e066bbfc29ba1bc649f5010f9c1ea9f6cc10881", 0x1f}], 0x1}}], 0x1, 0x0) 18:02:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="e222b3bcb66b5d312645874e066bbfc29ba1bc649f5010f9c1ea9f6cc10881", 0x1f}], 0x1}}], 0x1, 0x0) 18:02:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="e222b3bcb66b5d312645874e066bbfc29ba1bc649f5010f9c1ea9f6cc10881", 0x1f}], 0x1}}], 0x1, 0x0) [ 2458.458761][T15569] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2458.499524][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:41 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x400032c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 18:02:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x10001) sendfile(r3, r0, 0x0, 0x8000000000004) [ 2458.557396][T15561] vcan0 speed is unknown, defaulting to 1000 [ 2458.593529][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:41 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000a00000000000e000000070001006677000020000200080001000000f2ff040003"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2458.860707][T15613] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x10001) sendfile(r3, r0, 0x0, 0x8000000000004) 18:02:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x2}}]}, 0x24}}, 0x0) 18:02:42 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000a00000000000e000000070001006677000020000200080001000000f2ff040003"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:02:42 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:42 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x0, 0x1, 0x0, 0xa2764d8, 0x0, @empty, @local, 0x8000, 0x0, 0x200}}) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x1}, @val={0x2, 0x3, 0xa8f0, 0x9b00, 0x5, 0x375}, @llc={@snap={0xab, 0x0, "a6", "1bd27c"}}}, 0x16) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:02:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x20000010) [ 2459.887518][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:43 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000a00000000000e000000070001006677000020000200080001000000f2ff040003"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2460.311232][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x4, 0x8, 0xf1a, 0x20}, 0x40) 18:02:43 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000f300000000000000670200000000000000050000000a004e2000000000fe"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 18:02:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x10001) sendfile(r3, r0, 0x0, 0x8000000000004) 18:02:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:02:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x10001) sendfile(r3, r0, 0x0, 0x8000000000004) 18:02:44 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) 18:02:44 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) 18:02:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0)=r1, 0x4) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:02:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:02:45 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) 18:02:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005980)=""/231, 0xf}], 0x1}}], 0x2, 0x0, 0x0) 18:02:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 18:02:45 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f464de7188b"}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000100)=""/149, 0x207a0cb3) 18:02:45 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) 18:02:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:02:45 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x20000018) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) 18:02:45 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) 18:02:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000000)) [ 2462.991767][T24296] tipc: TX() has been purged, node left! 18:02:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000a40)="bd", 0x1) tee(r1, r0, 0x3, 0x7) 18:02:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005980)=""/231, 0xf}], 0x1}}], 0x2, 0x0, 0x0) 18:02:46 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x20000018) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) 18:02:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/185, 0xb9}], 0x1}}], 0x1, 0x40011160, 0x0) 18:02:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005980)=""/231, 0xf}], 0x1}}], 0x2, 0x0, 0x0) 18:02:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x8000a0ffffffff) 18:02:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/185, 0xb9}], 0x1}}], 0x1, 0x40011160, 0x0) 18:02:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) socket$inet(0x2, 0x80001, 0x84) 18:02:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/185, 0xb9}], 0x1}}], 0x1, 0x40011160, 0x0) 18:02:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000005980)=""/231, 0xf}], 0x1}}], 0x2, 0x0, 0x0) 18:02:46 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x20000018) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) 18:02:46 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10120, 0x0) [ 2463.731640][T15784] IPVS: ftp: loaded support on port[0] = 21 [ 2463.765130][T15784] vcan0 speed is unknown, defaulting to 1000 18:02:47 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0xc208, 0x4, 0x2b8}, &(0x7f0000000100)=0x10) unshare(0x40000000) socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "7560780af5d863ae"}, 0xc) 18:02:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/185, 0xb9}], 0x1}}], 0x1, 0x40011160, 0x0) 18:02:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr_pvc_info=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b2c, &(0x7f0000000000)) 18:02:47 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10120, 0x0) 18:02:47 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x20000018) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x0) 18:02:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 18:02:47 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10120, 0x0) [ 2464.286374][T15813] IPVS: ftp: loaded support on port[0] = 21 [ 2464.431619][T15790] IPVS: ftp: loaded support on port[0] = 21 [ 2464.586484][T15813] vcan0 speed is unknown, defaulting to 1000 [ 2464.923650][T15790] vcan0 speed is unknown, defaulting to 1000 [ 2465.012899][T15864] IPVS: ftp: loaded support on port[0] = 21 [ 2465.247782][T15864] vcan0 speed is unknown, defaulting to 1000 18:02:48 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001480), 0x400000000000305, 0x0, 0x0) pipe(0x0) 18:02:48 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:48 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10120, 0x0) 18:02:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff"], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 18:02:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 2465.517236][ T29] audit: type=1804 audit(1597082568.461:3307): pid=15904 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2829/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2465.623852][ T29] audit: type=1804 audit(1597082568.461:3308): pid=15910 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3144/cgroup.controllers" dev="sda1" ino=16364 res=1 18:02:48 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0xc208, 0x4, 0x2b8}, &(0x7f0000000100)=0x10) unshare(0x40000000) socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "7560780af5d863ae"}, 0xc) 18:02:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) 18:02:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @dev, @val, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x8000000, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "9f49fe3f7184ea33b2a6ad4f39d925f13f35b96c69bc2ce0", "3853cca0101f4f43d10924b03f67865b03c3d44b9abd12a5af5b700ae41ac1f3"}}}}}}}, 0x72) 18:02:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) 18:02:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b01adc2f2", 0x10}], 0x1}, 0x0) 18:02:48 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:49 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) [ 2466.252517][T15964] IPVS: ftp: loaded support on port[0] = 21 [ 2466.334848][ T29] audit: type=1804 audit(1597082569.281:3309): pid=15946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2830/cgroup.controllers" dev="sda1" ino=16377 res=1 18:02:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) 18:02:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_MULTICAST_SPEC={0x5}]}}}]}, 0x48}}, 0x0) [ 2466.569906][ T29] audit: type=1804 audit(1597082569.511:3310): pid=15966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3146/cgroup.controllers" dev="sda1" ino=16373 res=1 18:02:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) 18:02:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) [ 2467.296917][T15964] vcan0 speed is unknown, defaulting to 1000 18:02:50 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0xc208, 0x4, 0x2b8}, &(0x7f0000000100)=0x10) unshare(0x40000000) socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "7560780af5d863ae"}, 0xc) 18:02:50 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) 18:02:50 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0xf, 0x0, &(0x7f0000000380)=0x8) 18:02:50 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44071}, 0x854) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x700, r3}}, 0x20}}, 0x0) 18:02:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) close(r1) [ 2467.715474][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:50 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x2}, 0x80, 0x0}, 0xfffffff5}], 0x2, 0x0) [ 2467.934184][T16026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) [ 2467.972756][ T29] audit: type=1804 audit(1597082570.921:3311): pid=16025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3147/cgroup.controllers" dev="sda1" ino=16379 res=1 18:02:51 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x2}, 0x80, 0x0}, 0xfffffff5}], 0x2, 0x0) [ 2468.091264][ T29] audit: type=1804 audit(1597082570.951:3312): pid=16021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2831/cgroup.controllers" dev="sda1" ino=16371 res=1 18:02:51 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44071}, 0x854) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x700, r3}}, 0x20}}, 0x0) [ 2468.171937][T16052] IPVS: ftp: loaded support on port[0] = 21 18:02:51 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x2}, 0x80, 0x0}, 0xfffffff5}], 0x2, 0x0) [ 2468.314799][T16052] vcan0 speed is unknown, defaulting to 1000 [ 2468.341693][T24296] tipc: TX() has been purged, node left! [ 2468.351398][T24296] tipc: TX() has been purged, node left! [ 2468.389033][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2468.403889][T24296] tipc: TX() has been purged, node left! [ 2468.428457][T24296] tipc: TX() has been purged, node left! [ 2468.467326][T24296] tipc: TX() has been purged, node left! 18:02:53 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0xc208, 0x4, 0x2b8}, &(0x7f0000000100)=0x10) unshare(0x40000000) socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "7560780af5d863ae"}, 0xc) 18:02:53 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffdc6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) 18:02:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x2}, 0x80, 0x0}, 0xfffffff5}], 0x2, 0x0) 18:02:53 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:53 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={'wg0\x00', 0x7ff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = accept4$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000003c0)={0x9, 0x4, 0x6, 0x6, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000001) 18:02:53 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44071}, 0x854) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x700, r3}}, 0x20}}, 0x0) [ 2470.802164][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 18:02:53 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="e4ffffffffffaaaaaaaaaaaa81000000de69450000"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) [ 2471.042616][ T29] audit: type=1804 audit(1597082573.992:3313): pid=16105 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2832/cgroup.controllers" dev="sda1" ino=16363 res=1 [ 2471.086521][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2471.149395][ T29] audit: type=1804 audit(1597082574.032:3314): pid=16109 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3148/cgroup.controllers" dev="sda1" ino=16362 res=1 18:02:54 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44071}, 0x854) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x700, r3}}, 0x20}}, 0x0) [ 2471.336586][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20000280}}, 0x0) [ 2471.422206][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2471.462361][T16143] IPVS: ftp: loaded support on port[0] = 21 [ 2471.622320][T16143] vcan0 speed is unknown, defaulting to 1000 18:02:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0xffffffffffffff44}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 18:02:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) [ 2471.975605][T16167] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 2472.028872][T16167] ipt_CLUSTERIP: Please specify destination IP [ 2472.502076][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x17b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 18:02:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) 18:02:55 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x6a) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x2], r3}, 0x40) 18:02:55 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0xffffffffffffff44}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 18:02:55 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="e4ffffffffffaaaaaaaaaaaa81000000de69450000"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) [ 2472.835692][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:02:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x24, 0x31, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) [ 2472.894278][T16202] ipt_CLUSTERIP: Please specify destination IP 18:02:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b785bddcf97f3ff91a7d503d6659d20b8be13ae064c990a0026866c0c522be0bde8c973282ef1b4b8239feb685402ffe", 0x30) r2 = accept$alg(r1, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/86, 0x2e9) 18:02:55 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0xffffffffffffff44}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 18:02:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000002d000000609eef7b00081100200100e3270000000000000000000001ff020000000000000000000000000001"], 0x3a) [ 2473.137661][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:02:56 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) 18:02:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000100000000e4", @ANYRES32=0x0, @ANYBLOB="0120000000000000"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 2473.205554][T16224] ipt_CLUSTERIP: Please specify destination IP 18:02:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0xffffffffffffff44}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 2473.337053][T16232] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2473.474373][T16239] ipt_CLUSTERIP: Please specify destination IP 18:02:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) 18:02:56 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000220044944eeba71a4976e252922cb18f032e2aba000000012e0b3836005404b0e0301a4ce875f2e3b15f163ee340b7c59500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000097fc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000346bd623b8d456b54f878672800", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) read(r2, &(0x7f0000000a00)=""/202, 0xca) [ 2473.763095][T16237] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2473.776093][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:02:56 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) read(r1, &(0x7f0000000380)=""/205, 0xcd) close(r0) 18:02:57 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) read(r1, &(0x7f0000000380)=""/205, 0xcd) close(r0) 18:02:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x2c, 0x0, @local, @ipv4}}, 0x76) write(0xffffffffffffffff, 0x0, 0x0) 18:02:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80) 18:02:57 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="e4ffffffffffaaaaaaaaaaaa81000000de69450000"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:57 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000220044944eeba71a4976e252922cb18f032e2aba000000012e0b3836005404b0e0301a4ce875f2e3b15f163ee340b7c59500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000097fc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000346bd623b8d456b54f878672800", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) read(r2, &(0x7f0000000a00)=""/202, 0xca) 18:02:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000002d000000609eef7b00081100200100e3270000000000000000000001ff020000000000000000000000000001"], 0x3a) 18:02:57 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) read(r1, &(0x7f0000000380)=""/205, 0xcd) close(r0) 18:02:58 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) read(r1, &(0x7f0000000380)=""/205, 0xcd) close(r0) 18:02:58 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce69", 0x6}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 18:02:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) [ 2475.384692][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:02:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40046629, &(0x7f00000000c0)={0xc}) 18:02:58 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000220044944eeba71a4976e252922cb18f032e2aba000000012e0b3836005404b0e0301a4ce875f2e3b15f163ee340b7c59500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000097fc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000346bd623b8d456b54f878672800", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) read(r2, &(0x7f0000000a00)=""/202, 0xca) 18:02:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="2400000022001f", 0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 2476.024385][T24296] tipc: TX() has been purged, node left! 18:02:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@id, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 18:02:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)) 18:02:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000002d000000609eef7b00081100200100e3270000000000000000000001ff020000000000000000000000000001"], 0x3a) 18:02:59 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="e4ffffffffffaaaaaaaaaaaa81000000de69450000"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x5fffffffd, 0x0) 18:02:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x802, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x7, 0x10, 0x7, 0x3, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20, 0x5}, 0x0) 18:02:59 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000220044944eeba71a4976e252922cb18f032e2aba000000012e0b3836005404b0e0301a4ce875f2e3b15f163ee340b7c59500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000000000004974000000000000097fc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000346bd623b8d456b54f878672800", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) read(r2, &(0x7f0000000a00)=""/202, 0xca) 18:02:59 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x8880) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 18:02:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x10080, 0x0, 0x0) 18:02:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@id, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 18:02:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x10080, 0x0, 0x0) 18:02:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000000002d000000609eef7b00081100200100e3270000000000000000000001ff020000000000000000000000000001"], 0x3a) 18:03:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x10080, 0x0, 0x0) 18:03:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x10080, 0x0, 0x0) 18:03:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x168, 0x0, 0x250, 0x238, 0x238, 0x250, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@ipcomp={{0x30, 'ipcomp\x00'}, {[], 0x4c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 18:03:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@id, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 2477.323221][T16387] xt_ipcomp: unknown flags 4C 18:03:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 18:03:00 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x3}, @fwd={0x6}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, &(0x7f0000002340)=""/4080, 0x48, 0xff0, 0x1}, 0x20) 18:03:00 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x10, 0x453, 0x2, 0x70bd28}, 0x10}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff21000000006e2fe0138393", @ANYRES32=r4, @ANYBLOB="00000001f1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000005000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000d0000000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff001d4c26b900000003000000000100000080000000800000030000000000000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000024000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0200000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:03:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@id, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 18:03:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="3aa78f8b193d26f2c5170e2a49636ea4c32eacc2c4b64af9f2be9a19442bee73a5c65ae09af99bcb29a626ac87d31a30405b20eb419f549a"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6ffe000000000000000003000000580001800d000100"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 18:03:00 executing program 4: syz_init_net_socket$nfc_raw(0x27, 0x0, 0x4c) 18:03:01 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 18:03:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x7}]}}]}, 0x3c}}, 0x0) [ 2478.121638][T16412] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:01 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x8) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) [ 2478.180206][ T29] audit: type=1804 audit(1597082581.132:3315): pid=16405 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1493/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2478.225477][T16405] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2478.245202][T16405] tipc: Enabling of bearer <ò¾šD+îs¥ÆZàšù›Ë)¦&¬‡Ó0@[ ëAŸTš> rejected, illegal name [ 2478.274900][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:03:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d080000007c09e8fe55a10a000f000200142603000e1208000b0000000001a800160008000500e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40", 0x9c}, {&(0x7f0000000280)="7ccfd5ca151261c5c0dee011dee5e7706c1df754c712807063224e61a64668eed8336f89d5fa1278a3ff21b652ac903952438221b6d3fe17183fcbcf", 0x3c}], 0x2}, 0x0) 18:03:01 executing program 4: socket$inet6(0xa, 0x0, 0x8000) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:03:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x21, 0x833595f15feb790b, 0xff) socketpair(0x18, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES64, @ANYBLOB="6be1dd961aa9e4e61e6c516abdcc48e7c089ee5e1bde22dbe1fc47b117ea9d1201c105178872e98aec84d4dfc2b272233dc0adcc13cfe0fd763fd0d9cbdbc84ca1e025c6fd89faa5f23c3e14b3e2a925864d63f7186e69e17a8e18faff55d4792b11ed1b751444f007b7700eb90fd591229d2412f124e49c777cbe1f78c629c3708e4cc9e8e1375b12913ca6d4928118726d21ad17aa91e89ef2ebca3334dcd76d80d74eca3c4f69f3eeb8da2008ae1211a88cc5327eece3062a96000000000000"], 0x18}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private1, 0xa6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="e614821c18452706876a42384ab99a2565fc2013a48afed3682492cbcf21f73d09144815ce6ebb18a20f8efae18025c3ba3968b7d9859381c75a5eb7010000000000000034b34eacd184ef6f6e0055caef32bdeb29719d6a3acd515a"], &(0x7f0000000440)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="3a628e7c3de05fae10108c5c655e5f99b9da7433f6c77f142d06000000045a5b49cde076ebe180934be6ec79ac5317e8a6cfd751047ebb79c25c58d4563c14efca990ebe0300fabc039026a8e3cdd161d04bebc5994bbbf3001a37d0b75c9470ed0823c84323c4568005f3f093aba7ebdeda04c162270856b0927b3f9cdc0f6e9e1de89b4dee12320000d40d32bd83ed918739349dca69ce561d028391040e7dc73ec7e5f418cc60d292481d51f268cab0cddbd99168c3ea961100952087d6872c29d34a101d76342d3acb4da1067ae2d77689b31418dcd055dcba915a2b8f06901ea1f67a3ed84e935b63be9a742e44a1996c3cad386d24a1e01159212256b151eaaa6014d7d7451a70bd2a1461", @ANYRESDEC], &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x294}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x28044085}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) [ 2478.438683][T23919] Bluetooth: hci0: command 0x080f tx timeout [ 2478.474423][T16431] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 18:03:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000100)=0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:03:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x2c}}, 0x0) [ 2478.711313][T16441] IPVS: ftp: loaded support on port[0] = 21 [ 2478.773814][T16441] vcan0 speed is unknown, defaulting to 1000 [ 2478.797912][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:03:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x7d, "c4fdbccd3078222cdb31a8affa65ba30851576b6371f80c79d5d10cad08b9e4acdfb85d6e72c2bb9ddec6831f3eb14cdf988611c86e74c13ceee53abd129fd4c42035cf8fc259036331dc59e3197f00ec6701f288b30661beb68127478846e5da9494547395a46132a6f780b2ec2421954c02a7b7aafa72033fc8f3c6c"}, 0x85) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x82, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x14) [ 2478.946123][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="19000000140081ba000000000000008701546fabca1b4e7d06", 0x19}], 0x1}, 0x0) 18:03:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x2c}}, 0x0) 18:03:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0xc4, 0x0, 0x0) [ 2479.204401][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='\x01@#:,}vboxnet1$(\x00'}, 0x30) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 18:03:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x40030000000000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:03:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x21, 0x833595f15feb790b, 0xff) socketpair(0x18, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES64, @ANYBLOB="6be1dd961aa9e4e61e6c516abdcc48e7c089ee5e1bde22dbe1fc47b117ea9d1201c105178872e98aec84d4dfc2b272233dc0adcc13cfe0fd763fd0d9cbdbc84ca1e025c6fd89faa5f23c3e14b3e2a925864d63f7186e69e17a8e18faff55d4792b11ed1b751444f007b7700eb90fd591229d2412f124e49c777cbe1f78c629c3708e4cc9e8e1375b12913ca6d4928118726d21ad17aa91e89ef2ebca3334dcd76d80d74eca3c4f69f3eeb8da2008ae1211a88cc5327eece3062a96000000000000"], 0x18}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private1, 0xa6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="e614821c18452706876a42384ab99a2565fc2013a48afed3682492cbcf21f73d09144815ce6ebb18a20f8efae18025c3ba3968b7d9859381c75a5eb7010000000000000034b34eacd184ef6f6e0055caef32bdeb29719d6a3acd515a"], &(0x7f0000000440)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRESDEC], &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x294}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x28044085}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) [ 2479.486314][T16442] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2479.568144][T16479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2479.622701][T16479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2479.688208][T16442] IPVS: ftp: loaded support on port[0] = 21 [ 2479.744515][T16479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:03:02 executing program 4: socket$inet6(0xa, 0x0, 0x8000) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:03:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x2c}}, 0x0) [ 2480.397850][T16479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2480.423973][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2480.540651][T16496] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2480.655558][T16496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2480.710591][T16496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 18:03:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x3e, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4}, @func_proto]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 18:03:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@enum={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000004600)=""/210, 0x43, 0xd2, 0x8}, 0x20) 18:03:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x21, 0x833595f15feb790b, 0xff) socketpair(0x18, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES64, @ANYBLOB="6be1dd961aa9e4e61e6c516abdcc48e7c089ee5e1bde22dbe1fc47b117ea9d1201c105178872e98aec84d4dfc2b272233dc0adcc13cfe0fd763fd0d9cbdbc84ca1e025c6fd89faa5f23c3e14b3e2a925864d63f7186e69e17a8e18faff55d4792b11ed1b751444f007b7700eb90fd591229d2412f124e49c777cbe1f78c629c3708e4cc9e8e1375b12913ca6d4928118726d21ad17aa91e89ef2ebca3334dcd76d80d74eca3c4f69f3eeb8da2008ae1211a88cc5327eece3062a96000000000000"], 0x18}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private1, 0xa6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="e614821c18452706876a42384ab99a2565fc2013a48afed3682492cbcf21f73d09144815ce6ebb18a20f8efae18025c3ba3968b7d9859381c75a5eb7010000000000000034b34eacd184ef6f6e0055caef32bdeb29719d6a3acd515a"], &(0x7f0000000440)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRESDEC], &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x294}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000707800010000000000002000001c140000fe0000010000e9ff080001000000010087d628a194f279faf81feafe5af66ff927b9218aabd22d1248d3e190f3e59397864600000000000000000fe17730361750e8cd3b80b11b2c7e8a047b2af31caa16f8d44af39cc1122c42deda6e1da3a23a79c4ecc5ce7a04ffc62f6b72cbcda90e573e25a2a62ea6a9564d0c77eb6b22885e255f92a579040d209d57eb9c1843ed332f12024e79fc18598125a01dbb8c696a2b34d094535cd623f018cbed768284851e84b16443971a5fb50fab14628801d89022df1dd5022f6d854740dda05b60751e2f4230b5f5cf662451ab52de3c0975dc9d3628808dbbbc3a120e53741a65708f44936e6a653234a6b87583e7d6076e7eef000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x28044085}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) 18:03:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x2c}}, 0x0) 18:03:05 executing program 4: socket$inet6(0xa, 0x0, 0x8000) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:03:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x40030000000000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:03:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8}]}}}]}, 0x44}}, 0x0) [ 2482.786436][T16537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:05 executing program 2: r0 = socket(0x1e, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) 18:03:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f0000000140)={0x0, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 18:03:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040), 0x4) 18:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_bond\x00', 0x200}) 18:03:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x94}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:03:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) [ 2483.258846][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2483.340307][T16586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:03:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x40) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 2483.504730][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:03:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x21, 0x833595f15feb790b, 0xff) socketpair(0x18, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES64, @ANYBLOB="6be1dd961aa9e4e61e6c516abdcc48e7c089ee5e1bde22dbe1fc47b117ea9d1201c105178872e98aec84d4dfc2b272233dc0adcc13cfe0fd763fd0d9cbdbc84ca1e025c6fd89faa5f23c3e14b3e2a925864d63f7186e69e17a8e18faff55d4792b11ed1b751444f007b7700eb90fd591229d2412f124e49c777cbe1f78c629c3708e4cc9e8e1375b12913ca6d4928118726d21ad17aa91e89ef2ebca3334dcd76d80d74eca3c4f69f3eeb8da2008ae1211a88cc5327eece3062a96000000000000"], 0x18}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x6, @private1, 0xa6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="e614821c18452706876a42384ab99a2565fc2013a48afed3682492cbcf21f73d09144815ce6ebb18a20f8efae18025c3ba3968b7d9859381c75a5eb7010000000000000034b34eacd184ef6f6e0055caef32bdeb29719d6a3acd515a"], &(0x7f0000000440)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRESDEC], &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x294}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x28044085}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000), 0x4) 18:03:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x40030000000000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:03:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) 18:03:06 executing program 4: socket$inet6(0xa, 0x0, 0x8000) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:03:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) [ 2483.579682][T16580] device bridge16 entered promiscuous mode [ 2483.686910][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:03:06 executing program 5: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}, {{0x0, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x6}}}}}}, 0x0) 18:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xc0586300, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0x0, '\a\x00@'}, "ccbfc12abc282c27820fd9118600820e000500110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbdc1e5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) 18:03:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) 18:03:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) 18:03:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x40030000000000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:03:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) 18:03:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) [ 2484.685918][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2484.739624][T16646] device bridge17 entered promiscuous mode [ 2484.765916][T16663] sock: process `syz-executor.3' is using obsolete getsockopt SO_BSDCOMPAT 18:03:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 18:03:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0) [ 2484.993630][T16669] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 18:03:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 2485.041272][T16669] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2485.077839][T16672] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 18:03:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}]}]}]}}]}, 0x4c}}, 0x0) [ 2485.268130][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2485.270571][T16678] IPVS: ftp: loaded support on port[0] = 21 18:03:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) [ 2485.323651][T16658] device bridge40 entered promiscuous mode [ 2485.399094][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:03:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 18:03:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x903, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x28}}, 0x0) [ 2485.492998][T16678] vcan0 speed is unknown, defaulting to 1000 18:03:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}]}]}]}}]}, 0x4c}}, 0x0) 18:03:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffed3) 18:03:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000018007dc400000000000000000a000000ff000000000000001400050000000000000000000000ffff"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x2984fe546310, 0x0) [ 2485.935115][T16695] device bridge18 entered promiscuous mode 18:03:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) 18:03:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}], 0x10) 18:03:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000140)="120000003200e7ef007f0a00f4c7d7030a7c", 0x12, 0x0, 0x0, 0x0) 18:03:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}]}]}]}}]}, 0x4c}}, 0x0) [ 2486.182871][T16680] IPVS: ftp: loaded support on port[0] = 21 [ 2486.272971][T16680] vcan0 speed is unknown, defaulting to 1000 [ 2486.741628][T16763] device bridge41 entered promiscuous mode 18:03:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) 18:03:09 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) connect$caif(r0, &(0x7f0000000040)=@rfm={0x25, 0x0, "6ec7a0a3c8225886b19f09d8c5712dcb"}, 0x18) 18:03:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x200}) 18:03:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x4c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x1c, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}]}]}]}}]}, 0x4c}}, 0x0) 18:03:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) [ 2486.875306][ T7] tipc: TX() has been purged, node left! 18:03:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 18:03:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x200}) 18:03:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) [ 2487.297339][T16819] device bridge19 entered promiscuous mode 18:03:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100), 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r1, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) bind$can_raw(r3, &(0x7f0000001740)={0x1d, r6}, 0x10) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r6, @broadcast, @multicast2}, 0xc) 18:03:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x200}) 18:03:11 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10}, {0x10}], 0x20}, 0x0) 18:03:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) 18:03:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) [ 2488.635342][ T7] tipc: TX() has been purged, node left! [ 2488.644471][T16843] IPVS: ftp: loaded support on port[0] = 21 18:03:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x200}) [ 2488.749213][T16843] vcan0 speed is unknown, defaulting to 1000 18:03:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) 18:03:12 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000007c0)=0xffff, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x7fff, 0x4) [ 2489.221305][T16856] __nla_validate_parse: 7 callbacks suppressed [ 2489.221315][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2489.262692][T16856] device bridge42 entered promiscuous mode 18:03:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) 18:03:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffff}, 0xffffffffffffffd6) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c00020000000d0005", 0x2b}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:03:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb6663fe3e04956f16d16d"]}, 0x3a8) [ 2490.853908][ T7] tipc: TX() has been purged, node left! [ 2490.862639][T16924] IPVS: ftp: loaded support on port[0] = 21 [ 2490.904510][T16924] vcan0 speed is unknown, defaulting to 1000 18:03:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0xa}, [@FRA_DST={0xc5, 0x1, @empty}]}, 0x24}}, 0x0) [ 2491.216770][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:03:14 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) 18:03:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0014f9f407000909000a00800000000000000000000800020000000000", 0x24) 18:03:14 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) 18:03:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) 18:03:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000b0000000000011a00001400020077673200000300000000000000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 18:03:14 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600ff21c7617889ac5c54000a", @ANYRES16], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x807ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 18:03:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2491.916045][ T29] audit: type=1804 audit(1597082594.864:3316): pid=16977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3168/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 2492.044968][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:03:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) [ 2492.194374][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:03:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000000c0)=0x3f365342, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000280)=0x1, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000002c0)="8d90f7320b1ee0c687c72c60d2574aa44d63037d0e9c2cef68d2bc42b61f958090f49e139cd6cbdb442fa7358ed62cba5935d8b701dcd416af7b5d91ae4f7110f27b8b74925a40140bc14c597ba9d3c6dc76fc5d7b363115a4d5e74278cd780161b8747f5dfc1d570b8dbf7f6e953b87fac9dca241912a96b2ae51eb87fb84614014b08543476d06cd0fb23ba6f67c29857aae1db36090c0aaded4df910836fbe8d4a00e860d3d023413d50936e477768b84d26b3a872c21f633117b095b86d14df99984d0327c55a25efe7a96fa5eba8fa20d3dda7515d783b90f50e3895f7c8a152b3c61afea7264438fecd56bc076145f", &(0x7f00000003c0)=""/99}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xdd1d, 0x40, 0x0, 0x7}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x0) 18:03:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000b0000000000011a00001400020077673200000300000000000000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2492.407771][T17002] IPVS: ftp: loaded support on port[0] = 21 [ 2492.450709][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2492.534337][T17002] vcan0 speed is unknown, defaulting to 1000 18:03:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300080003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 18:03:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000b0000000000011a00001400020077673200000300000000000000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 18:03:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2492.802777][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2492.837379][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2493.072190][ T29] audit: type=1804 audit(1597082596.024:3317): pid=17024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3170/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2493.309517][T17031] IPVS: ftp: loaded support on port[0] = 21 [ 2493.394528][T17031] vcan0 speed is unknown, defaulting to 1000 18:03:16 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) 18:03:16 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r2}, 0x20) 18:03:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300080003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 18:03:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000b0000000000011a00001400020077673200000300000000000000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2493.716206][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2493.808309][T17067] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:16 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) [ 2493.958555][ T29] audit: type=1804 audit(1597082596.914:3318): pid=17069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3171/cgroup.controllers" dev="sda1" ino=16371 res=1 18:03:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x7, 0xcf}]}}]}, 0x3c}}, 0x0) 18:03:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300080003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 18:03:17 executing program 2: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x7, [], [@generic={0x0, 0x3c, "f4a23e90fafa0793d65e29df0f0cb5b9e0974d44f40cb82616d9897dc34cc7431f37a00e934af6099055b9c735011ba2df6957d8f5e231528b827225"}]}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000064000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012002300010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}}, 0x0) [ 2494.376475][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580200be0a020c0605000003004300080003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) 18:03:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a5ea4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 18:03:17 executing program 2: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x7, [], [@generic={0x0, 0x3c, "f4a23e90fafa0793d65e29df0f0cb5b9e0974d44f40cb82616d9897dc34cc7431f37a00e934af6099055b9c735011ba2df6957d8f5e231528b827225"}]}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000064000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012002300010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}}, 0x0) [ 2494.679218][T17122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2494.856884][ T29] audit: type=1804 audit(1597082597.804:3319): pid=17125 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3141/cgroup.controllers" dev="sda1" ino=16379 res=1 18:03:18 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) 18:03:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x32}}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x20000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000601516046b928bc2ac939969c76ce3b00fc03e8d51b995c2b01f73c685ac6e0724fc8992b3d1377d94ca73c76054f7c0bde5b119845687603e72d01096e75636e0b1182af7fe570a92c1c020c97310e8f5f8811c301ee73e21", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40000006600270d01000000fddbdf2500000000", @ANYRES32], 0xd4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001200)="54d20091afffdd1c198e0289606cab05ad53e250133d65da4154231b4e330b9a22e7de0c10e94b7581ca8a0f66040e99c87c2008ad63831e99ddedb46f925c076b95a69b9f45d765d07a6eb6edf5f8b994c8f7d1917533adfda289d54b6acbcdfca94b999758d4b646165d74bd5f8aa6b7c402fd751a7807735468bc143eac9c359098b83ca4d97a2ccdb8c5d8a5864c8c1427a7d3751bca4b47f73e24db7f36173f702e3bdeff3a371a1ffea2cd09457a1fdd9969ff546e52b6cc88e6eb0ba92edc69804a546348f6b3dc152f05ca55c5287411fe0d65a0", 0xd8}], 0x1}, 0x80) sendfile(r5, r4, 0x0, 0x103ffffff) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 18:03:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "e3ffffffffffffff", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:03:18 executing program 2: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x7, [], [@generic={0x0, 0x3c, "f4a23e90fafa0793d65e29df0f0cb5b9e0974d44f40cb82616d9897dc34cc7431f37a00e934af6099055b9c735011ba2df6957d8f5e231528b827225"}]}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000064000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012002300010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}}, 0x0) 18:03:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="6ad64570bf9313c29de285fb93277e8d9bbc7ad150120e661de5bc284295e2235017f1d9e929916b6587e5b6164ec8ad2ef259537edfb20a02c58a2e2c7f3776caa5d194afb1ff80933d4b6f804b27cb97a2f63178898ea07bdb62d57e8f5e26656abefbdb1c1a7efe9a0fdfac5aa92cb218988d63d594993824f47e2c41ed7cf1", 0x81, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180), 0x4) 18:03:18 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) [ 2495.369913][ T29] audit: type=1804 audit(1597082598.324:3320): pid=17144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3172/cgroup.controllers" dev="sda1" ino=16366 res=1 18:03:18 executing program 2: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x7, [], [@generic={0x0, 0x3c, "f4a23e90fafa0793d65e29df0f0cb5b9e0974d44f40cb82616d9897dc34cc7431f37a00e934af6099055b9c735011ba2df6957d8f5e231528b827225"}]}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000064000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012002300010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}}, 0x0) [ 2495.573168][ T29] audit: type=1804 audit(1597082598.384:3321): pid=17153 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3172/memory.events" dev="sda1" ino=16369 res=1 18:03:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x32}}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x20000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000601516046b928bc2ac939969c76ce3b00fc03e8d51b995c2b01f73c685ac6e0724fc8992b3d1377d94ca73c76054f7c0bde5b119845687603e72d01096e75636e0b1182af7fe570a92c1c020c97310e8f5f8811c301ee73e21", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40000006600270d01000000fddbdf2500000000", @ANYRES32], 0xd4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001200)="54d20091afffdd1c198e0289606cab05ad53e250133d65da4154231b4e330b9a22e7de0c10e94b7581ca8a0f66040e99c87c2008ad63831e99ddedb46f925c076b95a69b9f45d765d07a6eb6edf5f8b994c8f7d1917533adfda289d54b6acbcdfca94b999758d4b646165d74bd5f8aa6b7c402fd751a7807735468bc143eac9c359098b83ca4d97a2ccdb8c5d8a5864c8c1427a7d3751bca4b47f73e24db7f36173f702e3bdeff3a371a1ffea2cd09457a1fdd9969ff546e52b6cc88e6eb0ba92edc69804a546348f6b3dc152f05ca55c5287411fe0d65a0", 0xd8}], 0x1}, 0x80) sendfile(r5, r4, 0x0, 0x103ffffff) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 2495.718334][ T29] audit: type=1804 audit(1597082598.394:3322): pid=17153 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3172/cgroup.controllers" dev="sda1" ino=16366 res=1 18:03:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 18:03:19 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "e3ffffffffffffff", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:03:19 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x3fc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvfrom$netrom(r2, &(0x7f00000000c0)=""/195, 0xc3, 0x0, 0x0, 0x0) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x0) [ 2496.205125][ T29] audit: type=1804 audit(1597082599.154:3323): pid=17168 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3173/cgroup.controllers" dev="sda1" ino=16305 res=1 [ 2496.377659][ T29] audit: type=1804 audit(1597082599.294:3324): pid=17171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3173/memory.events" dev="sda1" ino=16257 res=1 18:03:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="6ad64570bf9313c29de285fb93277e8d9bbc7ad150120e661de5bc284295e2235017f1d9e929916b6587e5b6164ec8ad2ef259537edfb20a02c58a2e2c7f3776caa5d194afb1ff80933d4b6f804b27cb97a2f63178898ea07bdb62d57e8f5e26656abefbdb1c1a7efe9a0fdfac5aa92cb218988d63d594993824f47e2c41ed7cf1", 0x81, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180), 0x4) [ 2496.604617][ T29] audit: type=1804 audit(1597082599.304:3325): pid=17171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3173/cgroup.controllers" dev="sda1" ino=16305 res=1 18:03:19 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) 18:03:19 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x3fc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvfrom$netrom(r2, &(0x7f00000000c0)=""/195, 0xc3, 0x0, 0x0, 0x0) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x0) 18:03:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x32}}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x20000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000601516046b928bc2ac939969c76ce3b00fc03e8d51b995c2b01f73c685ac6e0724fc8992b3d1377d94ca73c76054f7c0bde5b119845687603e72d01096e75636e0b1182af7fe570a92c1c020c97310e8f5f8811c301ee73e21", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40000006600270d01000000fddbdf2500000000", @ANYRES32], 0xd4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001200)="54d20091afffdd1c198e0289606cab05ad53e250133d65da4154231b4e330b9a22e7de0c10e94b7581ca8a0f66040e99c87c2008ad63831e99ddedb46f925c076b95a69b9f45d765d07a6eb6edf5f8b994c8f7d1917533adfda289d54b6acbcdfca94b999758d4b646165d74bd5f8aa6b7c402fd751a7807735468bc143eac9c359098b83ca4d97a2ccdb8c5d8a5864c8c1427a7d3751bca4b47f73e24db7f36173f702e3bdeff3a371a1ffea2cd09457a1fdd9969ff546e52b6cc88e6eb0ba92edc69804a546348f6b3dc152f05ca55c5287411fe0d65a0", 0xd8}], 0x1}, 0x80) sendfile(r5, r4, 0x0, 0x103ffffff) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 18:03:20 executing program 3: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000540)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0xc2, "dfde2467f12a58601e0e7eab7389aeb84105ec964e214de793cd2adf3455252a97271a8bf4a95eb2c5d7f278cd58fe17cc69815a06e6ee5e2ad97507b4d4949b280e8f66111df3c1470eb393f74f31d0ddfcedee13d3027e9033816e1a6d06d4d97388a5a37b9b88c646847400543ed7b732e8b9e951dc64e5f486153b626d1d52c6f990a242fc026d648e4b72c2097a59a716de46606352671a6066beab4388a77ce860c3c4c6cebaedaeb0da122d12f3faed7d0948ea1e86c22455ee005ba4b3ab"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f00000022c0)=""/4088, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) 18:03:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "e3ffffffffffffff", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:03:20 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x3fc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvfrom$netrom(r2, &(0x7f00000000c0)=""/195, 0xc3, 0x0, 0x0, 0x0) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x0) [ 2497.448146][ T29] audit: type=1804 audit(1597082600.404:3326): pid=17199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3174/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 2497.600183][ T29] audit: type=1804 audit(1597082600.534:3327): pid=17203 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3174/memory.events" dev="sda1" ino=16363 res=1 18:03:20 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x3fc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvfrom$netrom(r2, &(0x7f00000000c0)=""/195, 0xc3, 0x0, 0x0, 0x0) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x0) [ 2497.866742][ T29] audit: type=1804 audit(1597082600.544:3328): pid=17203 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3174/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 2497.914226][ T7] tipc: TX() has been purged, node left! [ 2497.946236][ T7] tipc: TX() has been purged, node left! [ 2498.008576][ T7] tipc: TX() has been purged, node left! 18:03:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="6ad64570bf9313c29de285fb93277e8d9bbc7ad150120e661de5bc284295e2235017f1d9e929916b6587e5b6164ec8ad2ef259537edfb20a02c58a2e2c7f3776caa5d194afb1ff80933d4b6f804b27cb97a2f63178898ea07bdb62d57e8f5e26656abefbdb1c1a7efe9a0fdfac5aa92cb218988d63d594993824f47e2c41ed7cf1", 0x81, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180), 0x4) 18:03:21 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @multicast2}, 0x10) 18:03:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x32}}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x20000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000601516046b928bc2ac939969c76ce3b00fc03e8d51b995c2b01f73c685ac6e0724fc8992b3d1377d94ca73c76054f7c0bde5b119845687603e72d01096e75636e0b1182af7fe570a92c1c020c97310e8f5f8811c301ee73e21", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x64, 0xd27}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d40000006600270d01000000fddbdf2500000000", @ANYRES32], 0xd4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001200)="54d20091afffdd1c198e0289606cab05ad53e250133d65da4154231b4e330b9a22e7de0c10e94b7581ca8a0f66040e99c87c2008ad63831e99ddedb46f925c076b95a69b9f45d765d07a6eb6edf5f8b994c8f7d1917533adfda289d54b6acbcdfca94b999758d4b646165d74bd5f8aa6b7c402fd751a7807735468bc143eac9c359098b83ca4d97a2ccdb8c5d8a5864c8c1427a7d3751bca4b47f73e24db7f36173f702e3bdeff3a371a1ffea2cd09457a1fdd9969ff546e52b6cc88e6eb0ba92edc69804a546348f6b3dc152f05ca55c5287411fe0d65a0", 0xd8}], 0x1}, 0x80) sendfile(r5, r4, 0x0, 0x103ffffff) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 18:03:21 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:03:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "e3ffffffffffffff", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:03:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f000000be00)={0xa, 0x0, 0x0, 0x0, 0x93}, 0x3c) 18:03:21 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 2498.838836][ T29] audit: type=1804 audit(1597082601.794:3329): pid=17227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3175/cgroup.controllers" dev="sda1" ino=16363 res=1 18:03:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x8, 0x4, 0x1, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000026c0), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) [ 2499.022011][ T29] audit: type=1804 audit(1597082601.974:3330): pid=17235 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3175/memory.events" dev="sda1" ino=15965 res=1 18:03:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x744, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e51102591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 18:03:22 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) [ 2499.175965][ T29] audit: type=1804 audit(1597082602.004:3331): pid=17235 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3175/cgroup.controllers" dev="sda1" ino=16363 res=1 18:03:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x8, 0x4, 0x1, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000026c0), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) 18:03:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) 18:03:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="6ad64570bf9313c29de285fb93277e8d9bbc7ad150120e661de5bc284295e2235017f1d9e929916b6587e5b6164ec8ad2ef259537edfb20a02c58a2e2c7f3776caa5d194afb1ff80933d4b6f804b27cb97a2f63178898ea07bdb62d57e8f5e26656abefbdb1c1a7efe9a0fdfac5aa92cb218988d63d594993824f47e2c41ed7cf1", 0x81, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180), 0x4) 18:03:22 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) 18:03:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x8, 0x4, 0x1, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000026c0), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) 18:03:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) 18:03:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x8, 0x4, 0x1, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000026c0), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) 18:03:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000280)=0x805d, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000009000), 0x4) 18:03:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) 18:03:22 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 18:03:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 18:03:22 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 18:03:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) 18:03:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_NEWSETELEM={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 18:03:23 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty=[0x2, 0x0, 0x0, 0x0, 0x0, 0x4], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "e940ab2b724f1cf31311413b19f7865f"}}}}}}, 0x0) 18:03:23 executing program 1: pselect6(0xffffffffffffff40, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 18:03:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x6, 0x7}) recvfrom$inet6(r3, &(0x7f0000000000)=""/26, 0xfffffffffffffeff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e22c, 0x0) 18:03:23 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 18:03:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") clock_gettime(0xfffffffefffffffc, &(0x7f0000000040)) 18:03:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x100) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 18:03:23 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a0600000000000000013693210001", 0x1f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 18:03:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x171, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 18:03:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11004) 18:03:23 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) [ 2500.937625][T17313] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:23 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) [ 2500.978306][ T29] audit: type=1804 audit(1597082603.934:3332): pid=17310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3191/cgroup.controllers" dev="sda1" ino=16362 res=1 18:03:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000900010072737670000000002c0002002000040000000000000000000000000000000000000000000000000000001f000400020000000000b780db1a071a32319770d075ec062e4c5dff10784c759734ad131d22990a0d5a18a9e9ab6a1764ea3b992ceb11ce0c0e4227e4111debf797ac2d7d9ea34341a606a33d0b01e31fdf31cd8da08d5ea961fa01"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:03:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x100) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 18:03:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11004) [ 2501.154325][T17319] IPVS: ftp: loaded support on port[0] = 21 [ 2501.262972][T17319] vcan0 speed is unknown, defaulting to 1000 [ 2501.332277][T17339] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2501.397623][ T29] audit: type=1804 audit(1597082604.354:3333): pid=17340 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3192/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 2501.928281][T17325] IPVS: ftp: loaded support on port[0] = 21 [ 2501.970019][T17325] vcan0 speed is unknown, defaulting to 1000 18:03:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) 18:03:25 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000440), 0x26) 18:03:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x100) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 18:03:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11004) 18:03:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r2, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="880300001200000000000000000000200400000601000000000000000000000000000000000000000c00"/56, @ANYRES32=0x0, @ANYBLOB="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"/844], 0x388}}, 0x24089001) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1405, 0x80c, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x200018d4}, 0xc0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfffffcbe) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0xffff, 0x6, 0xa, 0x1, 0x2, 0x5, 0x6, 0xffff}, &(0x7f0000000300)=0x20) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ac816d2709aec2a323d1feed8a99f158d740dfe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131cf884b59dc125090a4b9e13"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 18:03:25 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="afe9016a21ede821d099f22feb43110067ef36b84ab1a333cc9353ad42337ae2fe41a9b700acc88d445fb4995bae888c5eb13ae0fc7ba61e7b8207686368e4728056d62c5af628747723ceb661921030829494c62d7395e11b375d53b8ee79819130745f571e38477fa66855f0c1a16966fe30a83ff1461a153f49b3cbf34c4a378bba0d2934d9ac41e8fe4d2bd2e2d9bcf78d4fb5aa720a9134ef83aa3be9be2dbdf18e8087974f89835cc3c5d678a2922ec2e5671b5aa9757f30931dfb0ee80d8f25534d54a19bfdef51a49509f928f2cad72230cfeafab2bd1cbb6c57b8bfe0bdab9728068d9f606817433745604b7d2b6f03235ba3199af350b7687f50dad9101a8af1f3b5c63d345478c1d368377149288155ef3daf38301916a072f86990c5b803c3c8dbe9e0715fae139a5763c5674bf9061814ec68af60db1378d77e9cf87a4a091ddc73f860838cb4e4dc1b5ea75a0735b367e4fb94b89187a6988e9cf82bc0b04b025f0ba7cc80633e73c35d273d3c23dddc232b994697a8710b6350c0d64ab94b5db7c657f6f08919668e6acb93a6d8285414d8526ba67e3c9cfc3056f2e9a8b10a04a7b79cac946d112b86361202018a0e93fab0d4f3042752c1d9366df9076c1a0b4409ef61224eae5af61deafe8b4e919ad04f600da300ae3941a56b6483ab4fdc5bb75fcfaaaad493e3be578efcc78c718b1de0216c055ebedadec17a5a9a7619ad39b4a3563b17b6443ce274af3bf0ac47b0e088f12a6b40ebba75ad8ff67962b48d0f1371b5d507e57e246afae62898db0b2a8c581e2e992bb3298fb97e4ca2ceeb1d4e828e34e33efd57c871f19477e939dfa7f9af608b0560117bf51dd5387dedc3a4d599a6ff7dd2b17671547ecef25f540eb3de21710506df3ee8eb6a2082df33a14631fd6a148ba0d3c56069d839cec059586e8be7e540f7ed9c019dcc38a609cd398f6c1f90c41d1f5d3e92263c040b559b0eefa35cfa966a213ad18d3a6305c4b5a590b9bf0adfadea4d87304a8dbcbb546e99e6e5b12a143364fad383ce9d8ce086da6b30cff4200ef5b5e0114b3b0a0b93690150d44cd716941716f4e8e1a6f8e5a8f0ec9dc32895b443eb98ddccd19f64242545698f30c851d6ed9c98547591eb535d0bc2dda67c7af12c20d1497b6b2975b6c590164c7187858900f24e62d1b86aacc59bb64dea5d98e6951fa285cdd3680ef3588848bb26b7d1ac3db2a07b61e7d1d52de1676b33cd0d6997046316cd0337c535d6743e4d3d5e40510e68a80b42e6d950ffe657fdd7d3d0e2bb461a1db09a638ed5a9f1a2d46239bc5a743e3589e98e3f482ca003e69860f0389073d11d0817bc84cd6a5f9d9ecd08856f940ed24cca9936b947fd5dfc2780faae35c108e07a965499f848054d88417d46d4bafc03b17957033c8779d226ef751bc97c830ac122b99cd219fa5c98adf8cf781cbfef3863d74e61252711c7c8dce5cd4aa782275a96ca95b0bf87f5873eee204dbe1a422f681b7e5aeca63dfca6f8764024940276266052cc574de380a0f3263fbd59741c1f1314fef811a6e014ba672f76448a871511e76176452049c2f9c0e589ad4ad6cc3883abd3fe818cc6a4cbe6a2d28c4bda715ee496829b78ab7519ecd5e8b6e9a0d05a67e518696ade6686d7a56e9a02e0b964a3a0a6bfed313ed54f01ee98ba56469a8519bd9b196454249fc08e4aa0bb3e4a753c638624950d2a1ad09bdbc932f621e92e90fe2216394eb580d753a9d81fa5b21ee0dc5a2240df332c1d6b1a6a1af962213e1c489ad6b55fa2e144a966f304d954b2792fbcafab359b14cede4217da653f3761a40393de68bf1be9cfcef88833b36174cd8d918b5d04678c070881181de00a15b242925dba34a4cc6d439b80792d6f75da89867e50ab5464f697355607ad68981e8aab878f410e2ec0f436a72b14edf987860ca00f2063e24db0abc52b4d0f22ed1b615de40bcf16da06958959996f97d601588f1e43ad9569f257eb4f10b653e4f4169f8fa29b79cc361157e0f0e50bb8cdaf1ff0836a09514fca17fc8a35c56272fe113d5df4472002116d5257c5fb4ebae0b60b7196bc2b0827711883a5fb8a88abdb2e5196d1b23e71435f476fe20c8abe44909c5928538f2f1d7d86eec397a13d5e8fcd8fab41c45bbdcdc45afb76bcd90b3e4930218cd607f7ea71b5a2b1c02f80c83eb3d053acad7777040d3fe61497a2b0b589b5208916f6e630dae26f7bc253943e7efde1a000c91d6a684b93f9174d59bde51d23708023f94b535febf55203025a6d761d936a4e5164451691ee02c7467e7972050f555bcf3ddbb6d66c5357479148bd7818455b85b3429661dc3baf1cff4efe7ef585ef7500d66c3ece7899b3b34624bcca4423429cf437f3d81a555de816b799df4b1050f197c61f7234df95350df11e62372c8e41aa7f885b33e49beaa8cb145886bd4151d951c1f285c658defde2969c660b079a1f1ea600a297b1160780718298d92877b1d9c0731196e9fe375c080cf4d2bd2445dcf4d5768c5f7d654902885fe0d68b607360cbe078cccd93d1dcca207d334ef8d938beea4951641a7c034acd96a608022f561f624c228808338d402fc814c70c3505af5af67fb1aa9967fc9963ea5c87b1e669ae76f03b028f8417755978abc4821b9aa1889e16294cb9346dcf8e88c5ea1924cc6a8761684940fd98890f30b2a84368f8b15bae1e4fc5f930633c8fc8f5d9f439f5e3c1cbbb421a75fe1ce575b0f6c44dc84507183cbcf1204bd0ab3512c19e60a9966b16d6abcf8677243dea1e4d2b1344fff9175ba1c92862799d64979aeab918f06a0182d2a9e2e057b1e8af531a81a40a067467d4ee88b51cbeed0312bda031394c90d3b683da78ca0e8269a670920219540788acd324f05df3eaa74ff3e7b4ea54c5864c14f5b1389c86ae2d4181ece96289bfd9033c3900d9498361e39a189be735ccba758d2cdd15ea0fb91464f3e97cb05bc3bc5eac4f038aa4d6420eeac30e5deb5dc2b967284557fd6dbf75edc0205c8f658b0e60cb2d4e76424b1b69c752e77df866ace5d39bc7abffb0c77c1f111689d256f37eb9e913212406bb8cefdaac00efc6c24dcea5db5beef04292b3c9deef2bc23e6f4a6f4461a649c84f22b37e35cf264072", 0x8c5}, {&(0x7f0000001840)="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", 0x8c5}], 0x2}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000003240)="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", 0xec5}, {&(0x7f0000004240)="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", 0xec5}], 0x2}}, {{0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005ec0)="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", 0x244}], 0x1}}], 0x4, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 2502.258496][ T29] audit: type=1804 audit(1597082605.204:3334): pid=17384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3193/cgroup.controllers" dev="sda1" ino=16369 res=1 18:03:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x100) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 18:03:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x11004) [ 2502.773118][ T29] audit: type=1804 audit(1597082605.725:3335): pid=17401 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3194/cgroup.controllers" dev="sda1" ino=16381 res=1 18:03:26 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) 18:03:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r0, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca765f64009400ff0325010ebc000002000000008000f0fffeffe809005300fff5dd00000010000100030c10000000000000000000", 0x58}], 0x1) 18:03:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x23}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x23}) 18:03:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="9000000018001f15b9409b0dffff65580260be0a020c0605000003004300050003000000fac8388827a685a168d0bf46d32345653602648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000f00000000000400160012000a00000000000000000000000001000000f31ae9e086ceb6ac62bb944cf2e79be6aba4183b00000000000000", 0x90, 0x0, 0x0, 0x0) [ 2503.159790][T17427] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2503.184819][T17429] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 35 (only 16 groups) [ 2503.196467][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:03:26 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="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", 0x8c5}, {&(0x7f0000001840)="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", 0x8c5}], 0x2}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000003240)="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", 0xec5}, {&(0x7f0000004240)="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", 0xec5}], 0x2}}, {{0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005ec0)="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", 0x244}], 0x1}}], 0x4, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 2503.212658][T17428] IPVS: ftp: loaded support on port[0] = 21 18:03:26 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) [ 2503.303474][T17428] vcan0 speed is unknown, defaulting to 1000 18:03:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) [ 2503.492815][T17442] IPVS: ftp: loaded support on port[0] = 21 [ 2503.501056][T17443] IPVS: ftp: loaded support on port[0] = 21 18:03:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x2e}]}}}]}, 0x40}}, 0x0) [ 2504.091151][T17443] vcan0 speed is unknown, defaulting to 1000 [ 2504.204302][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2504.325920][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2504.675818][T17442] vcan0 speed is unknown, defaulting to 1000 [ 2505.858546][ T7] tipc: TX() has been purged, node left! [ 2505.864679][ T7] tipc: TX() has been purged, node left! [ 2505.885956][ T7] tipc: TX() has been purged, node left! [ 2505.893036][ T7] tipc: TX() has been purged, node left! 18:03:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-serpent-avx)\x00'}, 0x58) close(r0) 18:03:29 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="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", 0x8c5}, {&(0x7f0000001840)="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", 0x8c5}], 0x2}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000003240)="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", 0xec5}, {&(0x7f0000004240)="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", 0xec5}], 0x2}}, {{0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005ec0)="022d221d2c67f2093f3de1d75ad589ea9707f724b823f7f937b37e69062ef45653d4b7b9a1f551b9a8aa0364fb88b33153dc05c321224cecfcb65dda40aeb3f280e5e35f0a2eac7eb478a73eb7769753930fd4abad8f0c2c3a6e3ad615a5eb6674b3bed1cf4f573dc1e6f30d4b902424e7ff107504f2c65e52e8915bb89139334d21b14d104e23e44a740b239d56c5d5bde744487afb3431210b3e6975d036f1913ef347e9089a7e18ba9187dec00791a13a69a047b7cc0ae734fae7bfbb41c37e84e6880d9d5bc9b830caf5c0dbe49e363a737b81b8f6ec98e234bffd9c6877a722d6e480b691f70fdc6ede32ed4cb221568d66de73fc57e68ee826d53bb4e02ee4c7735ff9d5d59675c546eec77acd93379a4e3f603fd673b3d81ced877c792e9ffcc675e416a4f44f1eb3310b932c7be8d6767e6f9616e0e88f329b865176325401108ebe43ee3ade7d36aea66d2305dafb55786f47b9c3a680cf050afc8dffa404ae945992b729a6155b1361c9803095ba87b1af658ee4a0bc58a3de3c2b24f975a919c9c9e524684e125af3d09c26fc903f827f1d57671a680801b5587177f478bfdceb068e183ba12bfdab15e39932a16a9d4553a5beffa303933eb366795f93451125d1d06114c72ab3785dbfaad3b9dd42a8177157d1eba1a9efec865e2a3f043622d82e053e20ff12f10c2cb1b3b058ab42598333d50ed7a4af1a18301850de31e78142a930ca25e551b73c2bf937162c16e2c89527e85b7a0fcfd029b3e1531c0449e818742f8794d2e8c6fd3556870e94dcf32e9f46ebb4beb51a1da4b7c3", 0x244}], 0x1}}], 0x4, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 18:03:29 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000030007b010000000020000000000000002c0001002800010011000100627066001826bc8006000300000000000c0007"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18:03:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) [ 2506.165326][T17534] IPVS: ftp: loaded support on port[0] = 21 [ 2506.196899][T17537] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2506.210804][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2506.264250][T17534] vcan0 speed is unknown, defaulting to 1000 [ 2506.264269][T17542] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2506.293020][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:30 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) 18:03:30 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) 18:03:30 executing program 0: r0 = socket(0x2a, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x2a, 0x300}, 0x2e) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11041, 0x0) 18:03:30 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)}], 0x1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000c00000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:03:30 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="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", 0x8c5}, {&(0x7f0000001840)="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", 0x8c5}], 0x2}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002d00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000003240)="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", 0xec5}, {&(0x7f0000004240)="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", 0xec5}], 0x2}}, {{0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005ec0)="022d221d2c67f2093f3de1d75ad589ea9707f724b823f7f937b37e69062ef45653d4b7b9a1f551b9a8aa0364fb88b33153dc05c321224cecfcb65dda40aeb3f280e5e35f0a2eac7eb478a73eb7769753930fd4abad8f0c2c3a6e3ad615a5eb6674b3bed1cf4f573dc1e6f30d4b902424e7ff107504f2c65e52e8915bb89139334d21b14d104e23e44a740b239d56c5d5bde744487afb3431210b3e6975d036f1913ef347e9089a7e18ba9187dec00791a13a69a047b7cc0ae734fae7bfbb41c37e84e6880d9d5bc9b830caf5c0dbe49e363a737b81b8f6ec98e234bffd9c6877a722d6e480b691f70fdc6ede32ed4cb221568d66de73fc57e68ee826d53bb4e02ee4c7735ff9d5d59675c546eec77acd93379a4e3f603fd673b3d81ced877c792e9ffcc675e416a4f44f1eb3310b932c7be8d6767e6f9616e0e88f329b865176325401108ebe43ee3ade7d36aea66d2305dafb55786f47b9c3a680cf050afc8dffa404ae945992b729a6155b1361c9803095ba87b1af658ee4a0bc58a3de3c2b24f975a919c9c9e524684e125af3d09c26fc903f827f1d57671a680801b5587177f478bfdceb068e183ba12bfdab15e39932a16a9d4553a5beffa303933eb366795f93451125d1d06114c72ab3785dbfaad3b9dd42a8177157d1eba1a9efec865e2a3f043622d82e053e20ff12f10c2cb1b3b058ab42598333d50ed7a4af1a18301850de31e78142a930ca25e551b73c2bf937162c16e2c89527e85b7a0fcfd029b3e1531c0449e818742f8794d2e8c6fd3556870e94dcf32e9f46ebb4beb51a1da4b7c3", 0x244}], 0x1}}], 0x4, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 18:03:30 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) 18:03:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001140)=ANY=[], 0x208e24b) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d45059a4df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 2507.622296][T17584] IPVS: ftp: loaded support on port[0] = 21 [ 2507.622334][T17583] IPVS: ftp: loaded support on port[0] = 21 [ 2507.652185][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2507.692512][T17586] IPVS: ftp: loaded support on port[0] = 21 [ 2507.725473][T17583] vcan0 speed is unknown, defaulting to 1000 [ 2507.906429][ T29] audit: type=1804 audit(1597082610.865:3336): pid=17600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3152/cgroup.controllers" dev="sda1" ino=16361 res=1 18:03:31 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000440)="a5", 0x1}], 0x1}}, {{&(0x7f0000002980)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000029c0)="fb", 0x1}], 0x1}}], 0x2, 0x0) 18:03:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x54, 0x30, 0x1, 0x0, 0x0, {}, [{0x40, 0x1, [@m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}}}]}]}, 0x54}}, 0x0) 18:03:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_MTU={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) [ 2508.463463][T17584] vcan0 speed is unknown, defaulting to 1000 18:03:31 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000440)="a5", 0x1}], 0x1}}, {{&(0x7f0000002980)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000029c0)="fb", 0x1}], 0x1}}], 0x2, 0x0) 18:03:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) [ 2508.617109][T17621] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2509.136192][T17586] vcan0 speed is unknown, defaulting to 1000 18:03:32 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) 18:03:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x188, 0x0, 0x188, 0x188, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x168, 0x188, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @ipv4={[], [], @multicast1}, [], [], [], 0x4000}}, @common=@srh={{0x30, 'srh\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'ip_vti0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = accept4(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80, 0x40000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000180)={0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="302b4640efa209ae32f344000010", @ANYRES16=r3, @ANYBLOB="050000000000000000000100000004000400050005000000000005000600000000000800030001000000"], 0x30}, 0x1, 0x6c}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'wg1\x00', {}, 0xa882}) 18:03:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000440)="a5", 0x1}], 0x1}}, {{&(0x7f0000002980)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000029c0)="fb", 0x1}], 0x1}}], 0x2, 0x0) 18:03:32 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x32) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f00000000c0)=0x8) 18:03:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 18:03:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffde2, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e4800001f000503d25a80648c63940d0524fc6008020ec02c00000005358221f0792e370900098000f01700d1bd", 0x33fe0}], 0x1}, 0x20008840) [ 2509.764810][T17685] ip6t_srh: unknown srh match flags 4000 [ 2509.765363][T17684] netlink: 17938 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2509.806386][T17686] IPVS: ftp: loaded support on port[0] = 21 [ 2509.846424][T17690] IPVS: ftp: loaded support on port[0] = 21 [ 2509.862712][T17685] ip6t_srh: unknown srh match flags 4000 [ 2509.922129][T17686] vcan0 speed is unknown, defaulting to 1000 18:03:32 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x8, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x40) 18:03:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 18:03:33 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000440)="a5", 0x1}], 0x1}}, {{&(0x7f0000002980)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000029c0)="fb", 0x1}], 0x1}}], 0x2, 0x0) 18:03:33 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x8, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x40) 18:03:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 18:03:33 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x53b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) [ 2510.751445][T17690] vcan0 speed is unknown, defaulting to 1000 18:03:34 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x8, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x40) 18:03:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000160002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c498d74a0980c531b25baddc3a35c92c4ced7d110bb1bd380087a72e6e83c782a8727dff5165e7a000000000000001bcc6ca5adc0cf459ccd48419eb9f790490d"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000280)=""/159, &(0x7f00000000c0)=0x9f) socket$inet6(0xa, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:03:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x0) 18:03:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 18:03:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) accept4(r0, 0x0, 0x0, 0x0) 18:03:34 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) [ 2511.370906][T17773] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x40000000003, 0x4, 0x4, 0x7cb, 0x4, 0xffffffffffffff9c}, 0x40) 18:03:34 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000000)={0x8, 0x4, 0x200000004, 0x8003, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e, 0x7b37, 0x80ffff, 0x48c4]}, 0x40) 18:03:34 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000c40)='wg0\x00', 0x4) [ 2511.610127][T17785] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f", 0x73}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb", 0x67}, {&(0x7f0000001600)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7deacf114c931c707559610cd1366220890b11cd862202abfbcd24a76a2f0f7044964480ebd12d0bca901ac0e4e3188cb74f2b45bc4f37e1694a1e15a039e34cf59a4c86cb1dc5210f4be91e84", 0x89}, {0x0}, {&(0x7f00000019c0)="b65836c3d98df987e963b3f2c6cd9a05289662018771ef0319e3d867bbdf237a39faca25190ea708520ec42d202286b0e1971368ddbefe57a0321b27c8f96fc298daf744", 0x44}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {0x0}, {&(0x7f0000001b40)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:03:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000160002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c498d74a0980c531b25baddc3a35c92c4ced7d110bb1bd380087a72e6e83c782a8727dff5165e7a000000000000001bcc6ca5adc0cf459ccd48419eb9f790490d"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000280)=""/159, &(0x7f00000000c0)=0x9f) socket$inet6(0xa, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:03:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x1ff}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2511.887824][ T7] tipc: TX() has been purged, node left! [ 2511.896668][ T7] tipc: TX() has been purged, node left! 18:03:34 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000c40)='wg0\x00', 0x4) [ 2511.929501][ T7] tipc: TX() has been purged, node left! [ 2511.952019][ T7] tipc: TX() has been purged, node left! 18:03:34 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2511.972513][T17813] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2512.009167][ T7] tipc: TX() has been purged, node left! [ 2512.066039][ T7] tipc: TX() has been purged, node left! [ 2512.146763][T17817] device veth332 entered promiscuous mode 18:03:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}}) 18:03:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000001540)={@void, @val={0x3}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "7dd4009efddf17d4f402f9bb3c10a44afb596f8fa529a3be7854cd4d14a747bacc252ad1eef5fe9b202983e5999d561e92237d78d2fc4d410b99280ec05635eca9"}}}}, 0x6b) 18:03:35 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000c40)='wg0\x00', 0x4) [ 2512.210285][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:35 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000c40)='wg0\x00', 0x4) [ 2512.308489][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:35 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 18:03:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:35 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9", 0x1) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 18:03:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000160002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c498d74a0980c531b25baddc3a35c92c4ced7d110bb1bd380087a72e6e83c782a8727dff5165e7a000000000000001bcc6ca5adc0cf459ccd48419eb9f790490d"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000280)=""/159, &(0x7f00000000c0)=0x9f) socket$inet6(0xa, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:03:35 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9", 0x1) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 18:03:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 18:03:35 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 18:03:35 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9", 0x1) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 2512.632663][ T29] audit: type=1804 audit(1597082615.585:3337): pid=17866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2887/cgroup.controllers" dev="sda1" ino=16379 res=1 18:03:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) [ 2512.760181][ T29] audit: type=1804 audit(1597082615.645:3338): pid=17871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2887/memory.events" dev="sda1" ino=16375 res=1 [ 2512.862740][ T29] audit: type=1800 audit(1597082615.655:3339): pid=17871 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16375 res=0 [ 2512.928419][ T29] audit: type=1804 audit(1597082615.665:3340): pid=17871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2887/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2513.104382][ T29] audit: type=1804 audit(1597082616.055:3341): pid=17887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2888/cgroup.controllers" dev="sda1" ino=16366 res=1 [ 2513.168840][T17870] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2513.196427][ T29] audit: type=1804 audit(1597082616.155:3342): pid=17890 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2888/memory.events" dev="sda1" ino=16365 res=1 [ 2513.256256][ T29] audit: type=1800 audit(1597082616.155:3343): pid=17890 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16365 res=0 [ 2513.278149][ T29] audit: type=1804 audit(1597082616.195:3344): pid=17890 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2888/cgroup.controllers" dev="sda1" ino=16366 res=1 18:03:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000001540)={@void, @val={0x3}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "7dd4009efddf17d4f402f9bb3c10a44afb596f8fa529a3be7854cd4d14a747bacc252ad1eef5fe9b202983e5999d561e92237d78d2fc4d410b99280ec05635eca9"}}}}, 0x6b) 18:03:36 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 18:03:36 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write(r1, &(0x7f0000000440)="b9", 0x1) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 18:03:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000160002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c498d74a0980c531b25baddc3a35c92c4ced7d110bb1bd380087a72e6e83c782a8727dff5165e7a000000000000001bcc6ca5adc0cf459ccd48419eb9f790490d"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000280)=""/159, &(0x7f00000000c0)=0x9f) socket$inet6(0xa, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:03:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:36 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) [ 2513.733029][T17914] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2513.887435][ T29] audit: type=1804 audit(1597082616.846:3345): pid=17915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1539/cgroup.controllers" dev="sda1" ino=16375 res=1 18:03:37 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="03020000000000002c00128009000100766c616e000000001c00028006000100000000000c0002000e0000000a0000000400038008000500", @ANYRES32=r2], 0x5c}}, 0x0) [ 2514.011591][ T29] audit: type=1804 audit(1597082616.936:3346): pid=17923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1539/memory.events" dev="sda1" ino=16380 res=1 [ 2514.139535][ T29] audit: type=1800 audit(1597082616.936:3347): pid=17923 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16380 res=0 18:03:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e20, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) [ 2514.203478][ T29] audit: type=1804 audit(1597082616.956:3348): pid=17919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2889/cgroup.controllers" dev="sda1" ino=16374 res=1 18:03:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) [ 2514.332482][ T29] audit: type=1804 audit(1597082616.996:3349): pid=17923 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1539/cgroup.controllers" dev="sda1" ino=16375 res=1 18:03:37 executing program 0: r0 = socket(0x11, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e000100413aff000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 2514.824849][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 18:03:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000001540)={@void, @val={0x3}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "7dd4009efddf17d4f402f9bb3c10a44afb596f8fa529a3be7854cd4d14a747bacc252ad1eef5fe9b202983e5999d561e92237d78d2fc4d410b99280ec05635eca9"}}}}, 0x6b) 18:03:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:37 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0xe, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0xc, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) [ 2514.930905][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 18:03:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 18:03:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x3fe00) ioctl$FITRIM(r0, 0x40046629, &(0x7f0000000040)) 18:03:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000001000000", @ANYRES32=r2, @ANYRES32], 0x28}}, 0x0) 18:03:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039af00"/20, @ANYRES32=0x0, @ANYBLOB="001500009b0000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1, r3}, 0x14) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 18:03:38 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 18:03:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="2e0000001d008108e00f80ecdb4cb9d90263190405000b00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 18:03:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 2515.893984][T18003] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2516.047494][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2516.068059][T17992] device bond0 entered promiscuous mode [ 2516.090888][T17992] device bond_slave_0 entered promiscuous mode [ 2516.104024][T17992] device bond_slave_1 entered promiscuous mode [ 2516.114779][T17992] device macvlan2 entered promiscuous mode [ 2516.145859][T17992] device veth71 entered promiscuous mode [ 2516.152058][T17992] device macvlan3 entered promiscuous mode [ 2516.160287][T17992] device veth73 entered promiscuous mode [ 2516.166823][T17992] device macvlan4 entered promiscuous mode [ 2516.194367][T17992] device veth75 entered promiscuous mode [ 2516.213647][T17992] device macvlan5 entered promiscuous mode [ 2516.235832][T17992] device veth77 entered promiscuous mode 18:03:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000001540)={@void, @val={0x3}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "7dd4009efddf17d4f402f9bb3c10a44afb596f8fa529a3be7854cd4d14a747bacc252ad1eef5fe9b202983e5999d561e92237d78d2fc4d410b99280ec05635eca9"}}}}, 0x6b) 18:03:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r1, 0x536ae464467e3929, 0x0, 0x0, {0x25, 0x0, 0x6800}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) getuid() 18:03:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 18:03:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ef8d1f70b95b", 0x6}, {&(0x7f0000000100)="6581fc9ff195a18b9fb3e53143759ec159c192dccd3c90287e1c5a4db8d62eb68b7c06344c7485cd3c625ea4d3ce1696bd2d08438d23826a3028be0aad8d4f1d244424f09fd0fb0b8725cfc158298414b13dc64e9d395efecf3d4a8df4c6daa3dfd692760015828c175f6035652dbaeda141a3698eebb290719189a27259ee9c0ea86ffa25b8dfe18c51472c898e8bf15c8994f9baa24853d623feb7bb1e5b14cea59616841a521216bed7b44f0698ddd0832b478ab8c4ae08755ea239bbc27d9ad2e42840685f0253624cacf9b3c401d72d9f8f1d188989fd782380abb30282f3faabad45ea63fc25b1d6cf4bff7b25fa6ecfb0ae6b64", 0xf7}, {&(0x7f0000000200)="6a4c3b991831b13782cd35cea5e515f01e5e9c489ffd0ef460d03692bc91fa6f4492f798ece213c47bd03a775554cc16c3a5995826425e977829bea58f694f8c17f82a3b48348fb318bcbc2a169e49334874dc741b5fbd77e023b4e89798a33053d9fc71f89c2efeeb0b88224176bd18df3ee396c3c3a933c663938d2f83c7dfe36d00d3628cd2da2c669bb8d2db39bd0d6c3bd552ad69949b85d888599d3e448831e2b1421489850c5d82ce2b80bb1a1d5c4741c81a63e6f31396ed8fdadd7d505d8c277ab4804745029590a0d570f122aca1971d1d63b6e2f3a62c2d8b4337add3d041cc056bdf5cec", 0xea}, {&(0x7f0000000300)="dade943366b33ce98b3d41a2d9a9e8b9200c50a1a55bdddb5f", 0x19}, {&(0x7f0000000340)="14b5", 0x2}, {&(0x7f0000002340)="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", 0xdde}], 0x6}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 18:03:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff}}]}]}}}]}, 0x44}}, 0x0) 18:03:39 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x9c\x11p\r\x00\x00v4/c+\x0fG\xf9aK\fX\a\x00gR', 0xffffffffffffffff}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 18:03:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @ipv4={[], [], @dev}, @dev}}}}}}}, 0x66) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 18:03:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ef8d1f70b95b", 0x6}, {&(0x7f0000000100)="6581fc9ff195a18b9fb3e53143759ec159c192dccd3c90287e1c5a4db8d62eb68b7c06344c7485cd3c625ea4d3ce1696bd2d08438d23826a3028be0aad8d4f1d244424f09fd0fb0b8725cfc158298414b13dc64e9d395efecf3d4a8df4c6daa3dfd692760015828c175f6035652dbaeda141a3698eebb290719189a27259ee9c0ea86ffa25b8dfe18c51472c898e8bf15c8994f9baa24853d623feb7bb1e5b14cea59616841a521216bed7b44f0698ddd0832b478ab8c4ae08755ea239bbc27d9ad2e42840685f0253624cacf9b3c401d72d9f8f1d188989fd782380abb30282f3faabad45ea63fc25b1d6cf4bff7b25fa6ecfb0ae6b64", 0xf7}, {&(0x7f0000000200)="6a4c3b991831b13782cd35cea5e515f01e5e9c489ffd0ef460d03692bc91fa6f4492f798ece213c47bd03a775554cc16c3a5995826425e977829bea58f694f8c17f82a3b48348fb318bcbc2a169e49334874dc741b5fbd77e023b4e89798a33053d9fc71f89c2efeeb0b88224176bd18df3ee396c3c3a933c663938d2f83c7dfe36d00d3628cd2da2c669bb8d2db39bd0d6c3bd552ad69949b85d888599d3e448831e2b1421489850c5d82ce2b80bb1a1d5c4741c81a63e6f31396ed8fdadd7d505d8c277ab4804745029590a0d570f122aca1971d1d63b6e2f3a62c2d8b4337add3d041cc056bdf5cec", 0xea}, {&(0x7f0000000300)="dade943366b33ce98b3d41a2d9a9e8b9200c50a1a55bdddb5f", 0x19}, {&(0x7f0000000340)="14b5", 0x2}, {&(0x7f0000002340)="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", 0xdde}], 0x6}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 18:03:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x1e, &(0x7f0000b67000), &(0x7f0000000000)=0x4) 18:03:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000020000d0508a44e00000000000200000000004e75d9000000140003006c6f"], 0x30}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) 18:03:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ef8d1f70b95b", 0x6}, {&(0x7f0000000100)="6581fc9ff195a18b9fb3e53143759ec159c192dccd3c90287e1c5a4db8d62eb68b7c06344c7485cd3c625ea4d3ce1696bd2d08438d23826a3028be0aad8d4f1d244424f09fd0fb0b8725cfc158298414b13dc64e9d395efecf3d4a8df4c6daa3dfd692760015828c175f6035652dbaeda141a3698eebb290719189a27259ee9c0ea86ffa25b8dfe18c51472c898e8bf15c8994f9baa24853d623feb7bb1e5b14cea59616841a521216bed7b44f0698ddd0832b478ab8c4ae08755ea239bbc27d9ad2e42840685f0253624cacf9b3c401d72d9f8f1d188989fd782380abb30282f3faabad45ea63fc25b1d6cf4bff7b25fa6ecfb0ae6b64", 0xf7}, {&(0x7f0000000200)="6a4c3b991831b13782cd35cea5e515f01e5e9c489ffd0ef460d03692bc91fa6f4492f798ece213c47bd03a775554cc16c3a5995826425e977829bea58f694f8c17f82a3b48348fb318bcbc2a169e49334874dc741b5fbd77e023b4e89798a33053d9fc71f89c2efeeb0b88224176bd18df3ee396c3c3a933c663938d2f83c7dfe36d00d3628cd2da2c669bb8d2db39bd0d6c3bd552ad69949b85d888599d3e448831e2b1421489850c5d82ce2b80bb1a1d5c4741c81a63e6f31396ed8fdadd7d505d8c277ab4804745029590a0d570f122aca1971d1d63b6e2f3a62c2d8b4337add3d041cc056bdf5cec", 0xea}, {&(0x7f0000000300)="dade943366b33ce98b3d41a2d9a9e8b9200c50a1a55bdddb5f", 0x19}, {&(0x7f0000000340)="14b5", 0x2}, {&(0x7f0000002340)="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", 0xdde}], 0x6}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 18:03:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:03:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x30}}, 0x0) 18:03:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ef8d1f70b95b", 0x6}, {&(0x7f0000000100)="6581fc9ff195a18b9fb3e53143759ec159c192dccd3c90287e1c5a4db8d62eb68b7c06344c7485cd3c625ea4d3ce1696bd2d08438d23826a3028be0aad8d4f1d244424f09fd0fb0b8725cfc158298414b13dc64e9d395efecf3d4a8df4c6daa3dfd692760015828c175f6035652dbaeda141a3698eebb290719189a27259ee9c0ea86ffa25b8dfe18c51472c898e8bf15c8994f9baa24853d623feb7bb1e5b14cea59616841a521216bed7b44f0698ddd0832b478ab8c4ae08755ea239bbc27d9ad2e42840685f0253624cacf9b3c401d72d9f8f1d188989fd782380abb30282f3faabad45ea63fc25b1d6cf4bff7b25fa6ecfb0ae6b64", 0xf7}, {&(0x7f0000000200)="6a4c3b991831b13782cd35cea5e515f01e5e9c489ffd0ef460d03692bc91fa6f4492f798ece213c47bd03a775554cc16c3a5995826425e977829bea58f694f8c17f82a3b48348fb318bcbc2a169e49334874dc741b5fbd77e023b4e89798a33053d9fc71f89c2efeeb0b88224176bd18df3ee396c3c3a933c663938d2f83c7dfe36d00d3628cd2da2c669bb8d2db39bd0d6c3bd552ad69949b85d888599d3e448831e2b1421489850c5d82ce2b80bb1a1d5c4741c81a63e6f31396ed8fdadd7d505d8c277ab4804745029590a0d570f122aca1971d1d63b6e2f3a62c2d8b4337add3d041cc056bdf5cec", 0xea}, {&(0x7f0000000300)="dade943366b33ce98b3d41a2d9a9e8b9200c50a1a55bdddb5f", 0x19}, {&(0x7f0000000340)="14b5", 0x2}, {&(0x7f0000002340)="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", 0xdde}], 0x6}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 18:03:40 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000005c0)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="5b31bf0400cbb140419b80008100501d4305", 0x5ee}], 0x1}, 0x0) 18:03:40 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x0, @remote, 'rose0\x00'}}) 18:03:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f00000000c0)=[@in], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0xfdf5) 18:03:40 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x18) 18:03:40 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:40 executing program 2: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x150, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 18:03:40 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000003a0c000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 18:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a00050014"], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0xffffffff, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 2517.955981][T18100] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2517.977550][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2518.011083][T18106] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 2518.023261][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 2518.023274][ T29] audit: type=1804 audit(1597082620.986:3377): pid=18107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 [ 2518.160199][T18100] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2518.183946][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2518.218353][ T29] audit: type=1800 audit(1597082621.026:3378): pid=18107 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16097 res=0 [ 2518.258808][ T29] audit: type=1804 audit(1597082621.026:3379): pid=18112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 [ 2518.306495][ T29] audit: type=1804 audit(1597082621.056:3380): pid=18107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 [ 2518.356050][ T29] audit: type=1804 audit(1597082621.116:3381): pid=18112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 [ 2518.832935][ T29] audit: type=1804 audit(1597082621.776:3382): pid=18112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 18:03:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:03:41 executing program 2: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x150, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 18:03:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000003a0c000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 18:03:41 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a00050014"], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0xffffffff, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 18:03:41 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 2518.885990][ T29] audit: type=1804 audit(1597082621.786:3383): pid=18112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 18:03:42 executing program 2: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x150, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 2519.006812][T18137] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2519.041238][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2519.087000][ T29] audit: type=1804 audit(1597082621.826:3384): pid=18131 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3204/memory.events" dev="sda1" ino=16097 res=1 18:03:42 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:42 executing program 2: r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x150, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 2519.250198][ T29] audit: type=1804 audit(1597082622.046:3385): pid=18148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3205/memory.events" dev="sda1" ino=16147 res=1 18:03:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a00050014"], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0xffffffff, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 18:03:42 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 2519.434516][ T29] audit: type=1800 audit(1597082622.046:3386): pid=18148 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16147 res=0 [ 2519.530923][T18173] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2519.557023][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000003a0c000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 18:03:43 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @empty}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:03:43 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:03:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0040020000000000280012800b0001006d616373656300001800028005000600000000000c00010000000000000000000a00050014"], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'team0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0xffffffff, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 18:03:43 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000003a0c000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 18:03:43 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 2520.442856][T18204] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2520.484896][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:43 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:44 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={r1, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x2d3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000030c0)={r2}, &(0x7f00000031c0)=0x8) 18:03:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {0x3e}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 18:03:44 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x28, 0x20, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@generic="8802b6000010"]}, @nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 18:03:44 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x7f}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'netpci0\x00', {0x2, 0x4e24, @local}}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000240)={0x7, 0x1000, "efbdc04d1aed00fa4c8ea2711e279d398882b9a9dab1b29eccb50d389407221e65e552b8f0255907392b4e14dc74e77697da2336c9fcdd15690848fe8863baa698ce0b6bdb5c06d86e5cdd00082345225df996d756e683277bf86eec1970e251e58f60d95b17bb6647bd94570458e6e65d274ec4a8b322622e695de1b03a070c737d3d356afa818c1460ba81f289edfec98b42c5a13a9288f694f149bc1ab753bffbaee1f3ae96d6adba1e800e307d97859699e856482e4a9ebac20b50de01dfd1697e4363551b1751456f5211cd089417caa7ba17d9022b1b649d29649d01bd21623832657c0e690735bb32c5d89f0e2ec4480803212232f77b81d0a9b4f9288b0682652a6e9866c244ea62d09c64b5cdf00e59135ce288fdf356f3a3229e15076256fe4a752644189f234a51ca5c3840d920dd36e14b1aef610565c7875b98500daf54d332b3d33b3aa5423545884ed02104f00e1a141cb870a8ad864b6b5105d7957fc4ea9238bbe1152246a170c8bf43525c1b177d5faaea753a0404739b61bc25d204cc7cc8ddb4c9a5580cb8099eee496e9951b01de71803d7cd16e5aa01d3ff22e92f045afa990d5b08ba578c773ad8a8002b2209b604504bc6e09850c0d6a35b39d105030100f802b7aa48e5f4718a0367818aa595ec04dd6af535be8ac08e81740d13eb2e5e949731939da81d145645272b68a29c6ccb7540e182951131ba229f43cf9ea3df7dfdf816dd472042faee16d70e39c4b6bf299241151aa4fdf4f1379149a892137dd71219d3c1f0d78364e3ef45bd5acdfb64d54953b6b8b60709df5a7dfb06b2db6023911927d8c53f9a2b4a43c07ffad7751b74e7770c916e1edd0e1461aa5be2c6d52485f3d3be806f3077885fedc919a92969bfd5ae11fb4281741eb68af9ff51afec7a0b7684f2eecee2e2e5d025b2520812b351d8a95a25cba02a1e79c4180cfa133843a397aa56086c568053688626cbeb0b3d1bd81433bfbc9169c74a5c55a3adc6f5780e9b4b0e5c34346d5ee2a93dbeb6bc6332a7f4fde80d9f06506df76757f3ff49cc852fbb06960a7f1fa851b1e9e75ca4ccf54af3bd02155dbaedd9a5be79072caa19106ace8d6d5966ebcddcf9f6aeb19e855d4331ee607e3408d1f69ad62ce54bb80bcb3abc650c2f3ce27513d6f5232809e8e0f2584cf216ffc03c7457827a00be0a2b018c7477888284151db9a52d5b2a6909c4b00604695ca8128029b5681aea817ac0971255004e85e9743a8c552abdcbe556bba0ff10146b7485a100aeceef3224cc8f0e18905fc7d90a84ca1825d9c62181b51d1f7668e89791618472dc9a683fe0bce38f22729f5765643e1b39166f409ba41261688accc83cb3ca806e34304a3c1b3c543c85615a174827b29de1a0188a2511e836043bb5f6c854aaaca14046ae06f4b70a273b0d4c01f4d349ef6f5ec06190a38d7bb00b09755e977c74f67515c7b81aae06b4b93e0f3adecf0653e270d28e6e5168a37724deeb203ba1eddfced7834c821273c62c5961ec74cc2c19de25ebc4a1c66e7612bcf4097a6e30134994f4b9be8b40a2be0969b334225e4efba02f53f4857b9bf265d9e72849404017fd75bcc392eee9279aceb25c0b2113c4682925d3d8619fbc352a64d98fa1ba2a13166dfa75e9b4c83c59b7b6d8cf8ca1c795c0f3f08258f3325d9057c0041165413517f7eb845c7f086d15e1fb78775441663e71e947c4dd5838fc9ba947e6c8fa92dc7b11b436881162dc7bb0b5a469f2a635548d344dd522beaca58caf82fa70f5379a880c4e6947a0fe04d16de171cc80b9d016214e4590a58c7d9ff7dcb541b5f829b4479c16469137acb033b3077f8e027604a961803487497a1b14af16a43fed50faa6612ee0421ec7309fd6ec6dded3b97979cbba2ca32d72a38833afe9a50b6cf278575d6f60c0fec561ee155ff1afa79731ff1cc63613cd458d2cdb68f9953fc2617492a116786d868d712f787caac5958989c05380196b68d75cd029755962b54d7576b159536dc170931377062c6cbbb15d0c4ab75a76c103d018163e1e437805a0129860b8bac1c9c9c26c459e749ffe0486357188006276380f6697678df6d2bbfe6aae63ba678e9da168faa3f1e6863ad789c030cbadd58133770b36941b673fd29f3be4856cad3138178f6ca082209eafedba7d996c114d9d545ca22b706e87b383abdfa2ecdf9381c8a31d83f67c834fe1c6ff6bdcfb6fce43d3ca88d85ec1aaa8e7242a1a339fd4288c75f18cb09c2a838aeebf07774ddce125e8fbf486c6cdaeffec1ce2024995408c33861dfe81cdbc07dd34f53b77b5ce799fb55b51700e56a5061a2028fdff6ad64bfee23986537dc1511a5a655b49b3c4ffbc395cb5e22240f4e69782b582bbed1620d02b60326abbd4c19dd5b9280731c4b8ac5e706775feec7dd40ffe71486a33a3bf13f806ec808802fb02e1c6382809316389259f54e8ce9322753ba1398b6a3fef968ff129ce87f25c22b9b1b7d5f418da9b4e76314077089a397749c938fe2717745a712f3093a48a7e13726d2f875824dfa0a61c039b7811e4658f0493cd8b72344be0eb804788e9d3a88e13a51e2f372c0495b1bd42b02080646275792758bc2533e369558db1d99d2e0fca5f27fefeda1ae4cb828ec02ce9e81a5c9af5ff1c43cc56733a7d8c14beb88a4a38b6e7ceb915c75ff3b38d67a842f743d0f0a35fbdd1a4959f1f212ecf3fa13e572746a5446866959b8882b93051c827877e78360416e2864fb3986fcb329e28c65a09982889cf932ab99a238bea181ab7d85ce9ab7a369e89cb320a01eb676bdea9f50533a69a1c65ee0e8f6c315943e2ee9fbaec4a791f6e53376a7e45651692ee1f8d650c414b7c3b4962f03531b8e442b0ca38a7982d8bb6390c6b528d88e77c772db887f3d1e8ea546d53417fb80ca427562865d518a403feef4af4cc266c20c45e2e33b68f4f3bae1787741088b69605b671048d56e289f086a2b4dc6eab0e43bffcf7d31e4ddbfa5e0bd6469f3600a91f9c89079e481bfbd27a873d76ffc6666da4f6500152dd696ca73f802d68bcad635108f68e5e5e8f88d77685ca0d59c8022067798cbac93955cea3672eb449b3f7416eebf1845b90f9070d33ed0f8273fffcd1c5e1726c959bb860722b5b4d77081af545d7705eaed59a40b992ba6d33ad59bad0dba4a3eb5a0801553db7dd8c2f8b87235c6e7f4973eab6e41e429f27fb70cf6cb91454eab9200001532db3be4bed9776fc203dd91e1b183d627d9cef0e3aa01d961a098b480bdd9af7bb8b3b8b25be73745aeae5564f1a79a8c23d07b07cc7b9bde63825742aeb2d5790ac105aed205c84164197d1d1392ce67dcf70a004e835cecdea232afdeb7d156cd225b81a6e2603b2f26578727e4475278f2488bf43a60a3ac12de038098cd1448b389bb985e2d049dbc73d143553254c98f4d968e6bab3d10f7f0fed3aecfff26616ee3503d0ce196ba3d684de6ec755b3478d1125396e80458879e2216acee30f9fb6cc5344ff5efe80535343ababe1431b301de254388afec65618918489835eccf17efe4f6ffbc6d2bb9aaa3fac65fd82d097f21dbee4f1387ac5b2dd6b9cbad52c115255bc6dadc4b6ebbf28c7ad364be7d4bd2aa0b6ba6065093432f53ad9859b89703ea7624c138d33724879a1b0906f31c0dbd86268795288a85d5b9762f8f4fbf5e727111da3a3ba8f01bf45b03975662e6bd8c05fa3880702f211282d99a9489c16c18506f78f7d8a736592e4ffde3f0d400eee065fb9baf13650194ee54dee955b4b0d39b177d40430f8f109e967ce7014310cf8f34fb124be0abb514e66def63c9d3cc29521c4c9a8970d362512e509221ea914caaeacca7ea5c7ffd2e41719c4828a7b17020120986a94497c43ad1c5597ddc86b2893d37113678ea76d391370b39719879dcd9e5c91e34b60ed58f88a0939341ca15f01d8f4f618f5c43e83e3a11a75ea3f87f9a0eded0fbad2fdd633c82802487c165eeb8415243f65dd1a949bff6590fba6c2c7ed626e86df555a4ce24a4da71c8e89b0ff562de01cf6541c4a58acdc64086cc69ffabe5d68c367affc7cfcd7c4a4bce22e7204fc270ddd2a8b169a7ebfa045646fad183cd349663330cb104f026c17822ff1cd6f259db3819af9d35dafd4339af98d21ff6214a753428333aedb63015bc1a40263d6872af42b73a3c9c489de0b3bd92cf2524e14c50a8860ec920d42df156a33ee3f810c0cd4100f8c3c2cf040a534ec889127bd23ff44b75c4f0c8df1ddf5cde436c990ed9e72a5057f5ee7f9bdac5c680f54f3c742c3162974d8ba9d4ff7f93996f129c6a474dc0ba07fcdc92da73ea607ea78f263e7a2efcd61f2c783fc8dc6872542d691c7a9569bbfc109ccc731545c4832521f9ac6bba88d2a4c4a4b2f5f05dea4c947a91d0941c6ce3615fdd9fd770e1413013b9026a216e6d8635ad0eb6fbb19241ca940b2c383cd839065beecd1e5387de04677ff87f4d33a9f4933b3c644870d957cde9e8275b59123e0813da0e5788ce4037226e557318f315c8515fa57fccf646027d7686b64c1a172de77ca04f303b58b162cd1c77bef346973d63aef65d64a107fef691d81a771f96a112d4dc11bfadb70c9472d63415af31a39762783083139f52f30533c85e3e6de35b3a6ddc1f99666f4b7a41cf1b50ffac24706919104045838ed3e8051aa851d0c1f9f144770b83e8ab86afd72902d7922be20affa7cdffea4f0edfa5c5bcd79d174a37ad9b45a32d2ea6f31d5715b6e9e8d70b8e6e93821648946eabc2f96ab1db8fd69ad027cc5be68439ec22c2ef29d3cfbf2b62d7626d0ae9bb7d3c67215a2e846eee14d1ff2bdc8216e5199b4a424c9eb7ad37d45d672a649bbc09c0dd0120820906a58e323fb2c0c25b4e750c09e34f401c3e490e0d62f521ed189f0b9eed96206f84c6037eb7b244e9334a66e0584a72f7f195009d6cc162ceb9d4ca6461fa02295a15b5f825c81a0b1983f6890aee1cf5c14ce381f9d7ac85dcf7bf27c4d1e7ac68c64e7d09232affe2ae549b5bcde9b08359d602a7d96af58cbe2014d115bcb9b1964f1eb462f1d95bcdd745d8d2cace8587f457ab6a9aba3a77db50b4a7b43ae3e333b4eb07dded75129b2af9a0491194c595fb130d168ee81cec47ef28137fba90061953c43e439b429d0420ee1c40d22df87663d360ccc696ad5fa87b4ed559dcf65f332a0623bcf53399cc72b1d80a9f6758e7d8a2a3b18ca09016cfb3e996e43017f00d096060bcc6dd5f0ace9d71375ec65c1fa423bb2c04d38ac480802fe75b782ed152a812c5adb29a9f28623a28c12fa6f48a8def9f3923febbc250fc5905091cba050cb34d0ff6c8aa7aeb81280f9e2f71112c3911a7c0876276db35f87f51e77cf09f9b95590edd34aedde26b33b503cf7f35170085d14baafe151944cc931f2f985e3c13eb83b3d763116ac98545b09c7d68f8e27efa1aa4e48a7c4c8498ca819ea0597c1b62b32ce8475e734636ba2ed03c1bd305e665577c68bafb24d16554dc31efd7c900b8484133b0002394ed4bc958ebfd135f0e1222934c6616940d13ba99df9e38d931a36af6a349c7456e02dfdbe094824ad404204d1dadbc860fdae5f9c978669977125e128d18fa78bc5eb8dc59cb7e925d25a5aec54d93355a860bc6e6aa55e8a349efe36792446651da5e8f0f442fcc46f98d4d3429449db1bde9942929e175b2b6590a3549c03f6db8761edd905e3078c1b11069b35"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r6, &(0x7f0000000080)={0x1a, 0xdcca14a119003b28, 0x8, 0x0, 0x0, 0x3f, @multicast}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2003, 0x0) 18:03:44 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007800)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x11}}}, 0x24}}, 0x0) 18:03:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000063c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) 18:03:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 18:03:45 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003380)={&(0x7f0000002d40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002d80)="1b", 0x1}], 0x1, &(0x7f0000003300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x3}}], 0x30}, 0x44) 18:03:45 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007800)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x11}}}, 0x24}}, 0x0) 18:03:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000063c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) 18:03:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 18:03:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003380)={&(0x7f0000002d40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002d80)="1b", 0x1}], 0x1, &(0x7f0000003300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x3}}], 0x30}, 0x44) 18:03:45 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007800)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x11}}}, 0x24}}, 0x0) 18:03:45 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000063c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) 18:03:46 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x7f}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'netpci0\x00', {0x2, 0x4e24, @local}}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000240)={0x7, 0x1000, "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"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r6, &(0x7f0000000080)={0x1a, 0xdcca14a119003b28, 0x8, 0x0, 0x0, 0x3f, @multicast}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2003, 0x0) 18:03:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003380)={&(0x7f0000002d40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002d80)="1b", 0x1}], 0x1, &(0x7f0000003300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x3}}], 0x30}, 0x44) 18:03:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001900010000000000000000001d0100001500030000000000000000006df2108940ce509705000000080005000000000078f7e7d679f3fe1238da665d1d950da2ad0c694774296511dede16d9055bbb25ac4941c29b675254026b97f96e00807a1ba22ff828b7cb964ca185b0bb95a7309c853a9717aeec9847892836b51d37c1febe05d523209c1fd4b10efc02b3413a4eacfd5171e685f8ac48325dc978575d3b8f1afa4fa74387a7102cbe29606addb016cdbbd92344d4afd3e0c7f87c9dc72081b15c7a0b3d48e67a9714f2edc850e8fb010c2b50a1236ee539395e35ec304153026f48e97b6cec7dad5cae8d2edde553781d28"], 0x34}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:03:46 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007800)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x11}}}, 0x24}}, 0x0) 18:03:46 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000063c0)=ANY=[@ANYBLOB="b702000000000010bfa30000000000000703000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000370000216a0a00fe002000008500000027000000b7000000200000009500000000000000d10d633a8c36bbeb00fa752373a7024f6d40c9b8c7da0ace992546daa595a6e42e7061ca9349bb7c84f39c355543248936043a9e60c287094edf3495a3d5ff55422c242ab67c1911f25ad1eec24cde2260a146967c385c3bf2e0e75a6e767509396c0a2280997125132380605f9840e41854f100002e88a3e1507ba3872c4096104e4f4c693cc6d690c2e28757adf0e3a62c23c42880366f2834cfb4a19983b67b6470592f29e31035b11348a531fb0bfbae11b2f840ff7f000000000000e97df1a24e86b2d61db560c34ddf60b4861953c158d065485416e718e12d3f6769c4cb0fe4a089e876e535188de88a16f36e4afe0f9ecc7dc90f"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab0500000800f08102e63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28) 18:03:46 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4004005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 18:03:46 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="1c1f86bc33915e6a7e0a3ba600dbc292b1ecafd03b42bcfc376ea83635ab76a5c91428b5b30ccb950d5a9c4bda54e0732b3ee004f6d5b4d97e8611651535ca7a8becf008bd2d9fb08262ba59f67f73bf471fe190e7cf43a3059ffdd9a99037ff07000000dfffff6f21e65d6a30", 0x6d, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x800, 0x10, 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="1ba000001b001d0d89fdc5cbdd045798707bed4dca14a7960f0f8ec8da78031c7660b08f515e", 0xff3b, 0x0, 0x0, 0x147) 18:03:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003380)={&(0x7f0000002d40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002d80)="1b", 0x1}], 0x1, &(0x7f0000003300)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x3}}], 0x30}, 0x44) [ 2523.341310][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 2523.341326][ T29] audit: type=1804 audit(1597082626.296:3425): pid=18296 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3176/memory.events" dev="sda1" ino=16368 res=1 18:03:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x48}]}], {0x14}}, 0x6c}}, 0x0) 18:03:46 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f000000b700)=[{{&(0x7f0000004d00)={0x2, 0x0, @dev}, 0x10, 0x0}}, {{&(0x7f0000008740)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x2, 0x0) [ 2523.511274][T18306] netlink: 38743 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2523.540414][ T29] audit: type=1800 audit(1597082626.296:3426): pid=18296 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16368 res=0 18:03:46 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000340)) 18:03:46 executing program 5: r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x22}, 0x6) [ 2523.684064][ T29] audit: type=1804 audit(1597082626.346:3427): pid=18296 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3176/memory.events" dev="sda1" ino=16368 res=1 [ 2523.869133][ T29] audit: type=1804 audit(1597082626.356:3428): pid=18296 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3176/memory.events" dev="sda1" ino=16368 res=1 [ 2523.972513][ T29] audit: type=1804 audit(1597082626.536:3429): pid=18310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3176/memory.events" dev="sda1" ino=16368 res=1 18:03:47 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x7f}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'netpci0\x00', {0x2, 0x4e24, @local}}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000240)={0x7, 0x1000, "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"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r6, &(0x7f0000000080)={0x1a, 0xdcca14a119003b28, 0x8, 0x0, 0x0, 0x3f, @multicast}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2003, 0x0) 18:03:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 18:03:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100460000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 18:03:47 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 18:03:47 executing program 5: r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x22}, 0x6) 18:03:47 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000340)) 18:03:47 executing program 0: unshare(0xc000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1000000000000016, 0x0, 0x40001, 0x1}, 0x2e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0}, 0x1d) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)}, 0x20) 18:03:47 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000340)) 18:03:47 executing program 5: r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x22}, 0x6) [ 2524.370438][ T29] audit: type=1804 audit(1597082627.326:3430): pid=18338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3213/cgroup.controllers" dev="sda1" ino=16364 res=1 18:03:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 18:03:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$netrom(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000200003041dfffd946f6105000a00000a1f000003141008000800180020001200140000001a00ffffba16a0aa1c09000081000000", 0x38}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000980)={0x3d8, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_ID={0xd, 0x18, "d6f732d3d09d926521"}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x3a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaea, 0x9, 0xf800, 0x6, 0xfff8, 0x9, 0xffff, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x8, 0x7, 0x400, 0x5, 0xfff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x5, 0xf54, 0x1ff, 0x5, 0x706]}}]}, @NL80211_BAND_5GHZ={0xfc, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x72, 0x81, 0xfff, 0x7f, 0xff79, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, "d3f4f6651fd3c25e77b07f64bb77f201d181f9b9a36adcd8464545131707eec334c913f4226e1e27ac14fa713bd4475a86996c95b65000efdffc3a9ce02e8d4e15e4a4"}, @NL80211_TXRATE_HT={0x10, 0x2, "20001f3913d267c0799dca8c"}, @NL80211_TXRATE_HT={0x49, 0x2, "f499dff435bc716ca9d2a34cb2866d3b2102aae3843dd664d526826a16c89184313d78d77075a6e856f7ee2e90c3be988f99727fca1155b4f4606735f0fd9552ed63a3d428"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x7511, 0xe023, 0xf6d, 0x2, 0xc000, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0x2, 0x32, 0x7ff, 0x0, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, "f41aa734"}]}, @NL80211_BAND_5GHZ={0x124, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, "ad699fc075fc25792aa7aa5f175f306caf4d23b38c6266af215733df27a5"}, @NL80211_TXRATE_HT={0x4f, 0x2, "e5b5cda96e17e0a8a5c4d20fe654c7548675ab736bdf22c74ca2adbe2e5cd8d3168f6fcdd5a5bf28b45c6d4326bcef5c0c0679e6aaf4deb4614f78b8473a60ff5c202b0bc854925871522b"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0x2, 0x0, 0x2, 0x20, 0xff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, "a20983a0b49180d2634f0d7fff07776373f7a562a598fb"}, @NL80211_TXRATE_LEGACY={0x8, 0x1, 'Chg-'}, @NL80211_TXRATE_HT={0x49, 0x2, "ebf65ac3b0308a1be31c1f653eb939478d0c4a9a6094ee6760f66108715c153cf6fcf6df2b267bb425fe31394d01ab97e396f64cae7a11a86c823b06d7d7703477578d62fd"}, @NL80211_TXRATE_LEGACY={0xc, 0x1, "62e8b917b22b448b"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0xab, 0xb68, 0x2, 0xffff, 0xd]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xb9, 0x9, 0x6, 0xff, 0x5, 0xd3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, [@NL80211_TXRATE_LEGACY={0x10, 0x1, "b9e79ae76305d0d54f6b5bbf"}, @NL80211_TXRATE_LEGACY={0xa, 0x1, "2b6c91d8b6be"}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xec, 0x3, [@NL80211_TXRATE_HT={0x33, 0x2, "a3b03b23c16e9594b247680b5c1c0a0ea8cacab4ca7d82de8c45814fc58c947475246a7966d39c9666196752e1e87e"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, "360d879bb6146a537c4483921818d8c22b99664bcd11e0c3728763f4a41db297dbbfc99f3d47de0071d8b4efbd8b4dc0f9"}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, "3a275a17fe5e2317b5fbd767a8fb6ee210ccfb31ee8e8f2a19643015d0aa"}, @NL80211_TXRATE_HT={0xe, 0x2, "b5217f4cb96e1669db69"}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, "c845aa54fe06a47609693ccab4ef4a158978da8bb36f4a48c5"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0x7, 0x4, 0x8, 0x9e3, 0x2d91, 0x7fff]}}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 18:03:47 executing program 5: r0 = socket(0x22, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x22}, 0x6) [ 2524.771607][T18356] IPVS: ftp: loaded support on port[0] = 21 [ 2524.876355][T18356] vcan0 speed is unknown, defaulting to 1000 18:03:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x7f}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'netpci0\x00', {0x2, 0x4e24, @local}}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000240)={0x7, 0x1000, "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"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r6, &(0x7f0000000080)={0x1a, 0xdcca14a119003b28, 0x8, 0x0, 0x0, 0x3f, @multicast}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2003, 0x0) 18:03:48 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000340)) 18:03:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="02", 0x7ffff000}], 0x2}], 0x1, 0x0) 18:03:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100460000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 18:03:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 18:03:48 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf200000700"/19], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000200ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000ec3dc2d0173c35ffc962bf000d28000000000000000000000000000000000000000000000000000000000000000000000000000000000080190df146be0206e1b1dd8d17939b0a00000000e4ffc39c8a1417d605bd09f9b312b19759a562c4c6eb1becfec690a934ad545f3893908cae2f637dc5c709db00f2603118be084811d32bab876d440803fa1481bf0300a7"], 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002e00030200"/20, @ANYRES32=r4, @ANYBLOB="00000000110a0200"], 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4e, &(0x7f0000000040), 0x1}, 0x0) [ 2525.550525][T18368] IPVS: ftp: loaded support on port[0] = 21 [ 2525.631385][ T29] audit: type=1804 audit(1597082628.587:3431): pid=18375 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3214/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 2525.701217][T18368] vcan0 speed is unknown, defaulting to 1000 18:03:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="02", 0x7ffff000}], 0x2}], 0x1, 0x0) [ 2525.892215][T18418] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2525.954842][ T9341] tipc: TX() has been purged, node left! 18:03:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) 18:03:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 18:03:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:03:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="02", 0x7ffff000}], 0x2}], 0x1, 0x0) 18:03:49 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], "", [[]]}, 0x158) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 18:03:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @private0}}]}, 0x190) 18:03:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100460000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 18:03:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0160c000000086dd6126f52600081100fe800000ffffff8d00000000000000bbff02000000000000000000000000000100000e22"], 0x0) 18:03:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 18:03:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x40}}, 0x0) 18:03:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xffffff85, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2527.060905][ T29] audit: type=1804 audit(1597082630.017:3432): pid=18459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3215/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 2527.105060][T18469] IPVS: ftp: loaded support on port[0] = 21 18:03:50 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000380)={@local, @remote, @void, {@generic={0x88a8}}}, 0x0) 18:03:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="02", 0x7ffff000}], 0x2}], 0x1, 0x0) 18:03:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='batadv_slave_1\x00'}) 18:03:50 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000380)={@local, @remote, @void, {@generic={0x88a8}}}, 0x0) [ 2527.249258][T18469] vcan0 speed is unknown, defaulting to 1000 [ 2527.361648][T18482] bond0: (slave batadv_slave_1): slave is up - this may be due to an out of date ifenslave 18:03:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac1414330200000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) [ 2527.845924][T18491] IPVS: ftp: loaded support on port[0] = 21 [ 2528.022661][T18491] vcan0 speed is unknown, defaulting to 1000 18:03:51 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], "", [[]]}, 0x158) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 18:03:51 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}}}, 0x0) 18:03:51 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000380)={@local, @remote, @void, {@generic={0x88a8}}}, 0x0) 18:03:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100460000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 18:03:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf4, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 18:03:51 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000380)={@local, @remote, @void, {@generic={0x88a8}}}, 0x0) 18:03:51 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}}}, 0x0) 18:03:51 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0x14, 0x0, 0x60, 0x3], @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @timestamp_reply={0x8}}}}}, 0x0) [ 2528.509612][ T29] audit: type=1804 audit(1597082631.467:3433): pid=18543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2907/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 2528.526991][T18552] IPVS: ftp: loaded support on port[0] = 21 [ 2528.626503][ T29] audit: type=1804 audit(1597082631.547:3434): pid=18551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2907/memory.events" dev="sda1" ino=16364 res=1 [ 2528.692480][T18552] vcan0 speed is unknown, defaulting to 1000 18:03:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="1e7cbabe64ce1b626151f749efcaca3c", 0x10) 18:03:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f00000001c0)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 18:03:51 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}}}, 0x0) [ 2528.787587][ T29] audit: type=1800 audit(1597082631.547:3435): pid=18551 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16364 res=0 [ 2528.944286][ T29] audit: type=1804 audit(1597082631.557:3436): pid=18551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2907/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 2529.118846][ T29] audit: type=1804 audit(1597082631.617:3437): pid=18546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3216/cgroup.controllers" dev="sda1" ino=16361 res=1 [ 2529.228054][ T29] audit: type=1804 audit(1597082632.147:3438): pid=18551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2907/cgroup.controllers" dev="sda1" ino=16362 res=1 18:03:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], "", [[]]}, 0x158) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 18:03:52 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) 18:03:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) write(r0, &(0x7f0000000140)="0300ffff0000", 0x6) 18:03:52 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}}}, 0x0) 18:03:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 18:03:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 2529.826435][T18611] IPVS: ftp: loaded support on port[0] = 21 [ 2529.962948][T18611] vcan0 speed is unknown, defaulting to 1000 [ 2530.014458][ T29] audit: type=1804 audit(1597082632.977:3439): pid=18607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2908/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2530.029003][T18623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2530.159976][ T29] audit: type=1804 audit(1597082633.117:3440): pid=18628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3227/cgroup.controllers" dev="sda1" ino=16355 res=1 [ 2530.413763][ T29] audit: type=1804 audit(1597082633.157:3441): pid=18629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2908/memory.events" dev="sda1" ino=16377 res=1 [ 2530.447336][T18623] device bond13 entered promiscuous mode [ 2530.501425][T18623] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2530.606916][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2530.656848][ T29] audit: type=1800 audit(1597082633.167:3442): pid=18629 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16377 res=0 18:03:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:03:53 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) 18:03:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 2530.895756][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2531.152677][T18673] device bond14 entered promiscuous mode [ 2531.201213][T18673] 8021q: adding VLAN 0 to HW filter on device bond14 18:03:54 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], "", [[]]}, 0x158) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 18:03:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:03:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:54 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 2531.786355][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2531.948180][T18749] IPVS: ftp: loaded support on port[0] = 21 [ 2532.006901][T18740] device bond15 entered promiscuous mode [ 2532.012900][T18740] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2532.122496][T18749] vcan0 speed is unknown, defaulting to 1000 18:03:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:03:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 2532.383382][ T9341] tipc: TX() has been purged, node left! [ 2532.429867][ T9341] tipc: TX() has been purged, node left! [ 2532.479608][ T9341] tipc: TX() has been purged, node left! [ 2532.525167][ T9341] tipc: TX() has been purged, node left! [ 2532.556952][ T9341] tipc: TX() has been purged, node left! [ 2532.575092][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:03:55 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 2532.752703][T18793] device bond16 entered promiscuous mode [ 2532.826926][T18793] 8021q: adding VLAN 0 to HW filter on device bond16 18:03:56 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) 18:03:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 18:03:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 2533.661646][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2533.783088][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 2533.783101][ T29] audit: type=1804 audit(1597082636.737:3467): pid=18859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3229/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2533.840655][T18863] device bond14 entered promiscuous mode [ 2533.847034][T18863] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2533.927409][ T29] audit: type=1804 audit(1597082636.887:3468): pid=18861 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3220/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 2534.027744][ T29] audit: type=1804 audit(1597082636.887:3469): pid=18859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3229/memory.events" dev="sda1" ino=16370 res=1 [ 2534.089201][ T29] audit: type=1800 audit(1597082636.887:3470): pid=18859 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16370 res=0 [ 2534.134579][ T29] audit: type=1804 audit(1597082636.947:3471): pid=18859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3229/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2534.219847][ T29] audit: type=1804 audit(1597082636.987:3472): pid=18869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3220/memory.events" dev="sda1" ino=16371 res=1 [ 2534.331812][ T29] audit: type=1800 audit(1597082636.987:3473): pid=18869 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16371 res=0 [ 2534.408332][ T29] audit: type=1804 audit(1597082637.077:3474): pid=18869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3220/cgroup.controllers" dev="sda1" ino=16375 res=1 18:03:59 executing program 4: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)) 18:03:59 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) 18:03:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:03:59 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) 18:03:59 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], []]}, 0x358) write$nbd(r1, &(0x7f0000001080)=ANY=[], 0xed) 18:03:59 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2536.156387][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:03:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="71fa68a30c69"}]}, 0x40}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x49249249249265a, 0x0) [ 2536.232199][T18934] IPVS: ftp: loaded support on port[0] = 21 [ 2536.254295][ T29] audit: type=1804 audit(1597082639.217:3475): pid=18932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2911/cgroup.controllers" dev="sda1" ino=16370 res=1 [ 2536.314200][T18931] device bond15 entered promiscuous mode [ 2536.372879][T18931] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2536.460222][T18934] vcan0 speed is unknown, defaulting to 1000 [ 2536.463586][T18976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:03:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:03:59 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 2536.591679][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:03:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:03:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000004000)=0x800000000b94, 0x4) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000140)=@can={0x1d, r3}, 0x80, 0x0}}], 0x1, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 2536.742486][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2536.929447][T18989] device bond16 entered promiscuous mode [ 2536.939179][T18989] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2536.939237][T18940] IPVS: ftp: loaded support on port[0] = 21 [ 2536.958783][ T29] audit: type=1804 audit(1597082639.918:3476): pid=18936 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2911/cgroup.controllers" dev="sda1" ino=16370 res=1 18:04:00 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) 18:04:00 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) 18:04:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @fixed={[], 0x10}, 0x3}, 0xe) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 18:04:00 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 2537.470885][T18940] vcan0 speed is unknown, defaulting to 1000 18:04:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 2537.897282][T19078] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. 18:04:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:04:01 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) 18:04:01 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:04:01 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) 18:04:01 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:04:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:04:01 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 2538.930306][T19124] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. 18:04:01 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:04:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:04:02 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) 18:04:02 executing program 5: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070700000000000000000000000014000200776730"], 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendfile(r3, r2, 0x0, 0x100005000) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) [ 2539.483478][T13542] Bluetooth: hci2: command 0x0405 tx timeout 18:04:02 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 18:04:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:04:02 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 2539.668576][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2539.668590][ T29] audit: type=1804 audit(1597082642.628:3481): pid=19138 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3226/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 2539.816369][ T29] audit: type=1804 audit(1597082642.778:3482): pid=19141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir106635352/syzkaller.TzmAye/2914/cgroup.controllers" dev="sda1" ino=16366 res=1 18:04:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty}, 0x0, @in6=@private2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 2539.944340][T19152] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. 18:04:03 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:04:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x11, 0x0, 0xcb) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) 18:04:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(r0, 0x2) 18:04:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 2540.522806][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2540.559818][T19169] sctp: [Deprecated]: syz-executor.4 (pid 19169) Use of int in max_burst socket option deprecated. [ 2540.559818][T19169] Use struct sctp_assoc_value instead 18:04:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 18:04:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xff03) 18:04:03 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x20, 0x8000002}}, 0x10) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r2 = socket(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10) bind(r0, 0x0, 0x0) [ 2540.806671][T19172] bond17: (slave bridge20): Enslaving as an active interface with an up link [ 2540.885643][T19181] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2540.909086][T19169] sctp: [Deprecated]: syz-executor.4 (pid 19169) Use of int in max_burst socket option deprecated. [ 2540.909086][T19169] Use struct sctp_assoc_value instead [ 2540.921231][T19181] bond0: (slave bond17): Enslaving as an active interface with an up link [ 2540.945744][ T9341] tipc: TX() has been purged, node left! [ 2540.966205][ T9341] tipc: TX() has been purged, node left! [ 2540.967187][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:04:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 18:04:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080000007c09e8fe55a10a0015000200142603000e120800060000000001a800160008000400e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf63951f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 18:04:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xe80300007ffffff7) [ 2541.145321][T19235] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 2541.172784][T19235] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 18:04:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 2541.213028][T19235] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. 18:04:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x15, 0x0, 0x0) accept(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 18:04:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(r0, 0x2) 18:04:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 18:04:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xe80300007ffffff7) [ 2541.552077][T19258] sctp: [Deprecated]: syz-executor.4 (pid 19258) Use of int in max_burst socket option deprecated. [ 2541.552077][T19258] Use struct sctp_assoc_value instead 18:04:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 18:04:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}, 0x1, 0x300000000000000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:04:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xe80300007ffffff7) 18:04:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(r0, 0x2) 18:04:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xe80300007ffffff7) 18:04:04 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) [ 2542.058100][T19292] sctp: [Deprecated]: syz-executor.4 (pid 19292) Use of int in max_burst socket option deprecated. [ 2542.058100][T19292] Use struct sctp_assoc_value instead [ 2542.202596][T19297] bridge21: port 1(bond0) entered blocking state 18:04:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x8ffff}, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0xeade}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @sack_perm, @sack_perm], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 2542.258697][T19297] bridge21: port 1(bond0) entered disabled state [ 2542.344792][T19297] device bond_slave_0 entered promiscuous mode [ 2542.351172][T19297] device bond_slave_1 entered promiscuous mode [ 2542.357754][T19297] device bridge20 entered promiscuous mode 18:04:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}}) 18:04:05 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000000280)=@nl=@unspec={0x0, 0x2}, 0x80) [ 2542.486749][T19309] device bond_slave_0 left promiscuous mode [ 2542.492702][T19309] device bond_slave_1 left promiscuous mode [ 2542.499370][T19309] device bridge20 left promiscuous mode 18:04:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(r0, 0x2) [ 2542.550870][T19309] bridge21: port 1(bond0) entered disabled state 18:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 2542.673142][T19317] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2542.729402][T19328] sctp: [Deprecated]: syz-executor.4 (pid 19328) Use of int in max_burst socket option deprecated. [ 2542.729402][T19328] Use struct sctp_assoc_value instead 18:04:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 18:04:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}}) 18:04:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}}) 18:04:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a340)=[{0x0, 0x0, &(0x7f0000000540), 0x17, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x10}], 0x1}, 0x0) 18:04:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a340)=[{0x0, 0x0, &(0x7f0000000540), 0x17, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x10}], 0x1}, 0x0) 18:04:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}}) 18:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 18:04:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="7f000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 18:04:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 18:04:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a340)=[{0x0, 0x0, &(0x7f0000000540), 0x17, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x10}], 0x1}, 0x0) 18:04:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 2543.438283][T19364] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 18:04:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a340)=[{0x0, 0x0, &(0x7f0000000540), 0x17, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x10}], 0x1}, 0x0) 18:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 2543.804609][T19368] bond17: (slave bridge31): making interface the new active one 18:04:06 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 2543.912264][T19368] bond17: (slave bridge31): Enslaving as an active interface with an up link [ 2543.997279][T19384] team0: Port device bond17 added [ 2544.025522][T19396] bridge21: port 1(bond0) entered blocking state [ 2544.036839][T19396] bridge21: port 1(bond0) entered disabled state [ 2544.085136][T19396] device bond_slave_0 entered promiscuous mode [ 2544.091458][T19396] device bond_slave_1 entered promiscuous mode [ 2544.097886][T19396] device bridge20 entered promiscuous mode 18:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 2544.194471][T19409] device bond_slave_0 left promiscuous mode [ 2544.200491][T19409] device bond_slave_1 left promiscuous mode [ 2544.207588][T19409] device bridge20 left promiscuous mode [ 2544.264227][T19409] bridge21: port 1(bond0) entered disabled state [ 2544.396158][T19422] bridge57: port 1(bond0) entered blocking state [ 2544.402569][T19422] bridge57: port 1(bond0) entered disabled state [ 2544.428626][T19422] device bond_slave_0 entered promiscuous mode [ 2544.434983][T19422] device bond_slave_1 entered promiscuous mode [ 2544.441263][T19422] device bridge45 entered promiscuous mode [ 2544.465560][T19423] device bond_slave_0 left promiscuous mode [ 2544.471581][T19423] device bond_slave_1 left promiscuous mode [ 2544.477932][T19423] device bridge45 left promiscuous mode [ 2544.486556][T19423] bridge57: port 1(bond0) entered disabled state 18:04:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x40}}, 0x0) [ 2544.549931][T19368] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2544.592787][T19432] bridge43: port 1(bond0) entered blocking state [ 2544.599199][T19432] bridge43: port 1(bond0) entered disabled state 18:04:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) [ 2544.663440][T19433] bridge43: port 1(bond0) entered disabled state 18:04:07 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000680)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bind(r0, 0x0, 0x0) 18:04:07 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/1, &(0x7f0000000080)=0x1) 18:04:07 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x1c, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 18:04:07 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000100001040800000200000000e7ffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010004000000040003800c000200100000001300000008000500", @ANYRES32=r1], 0x5c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 18:04:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/1, &(0x7f0000000080)=0x1) [ 2545.052291][T19469] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms 18:04:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/1, &(0x7f0000000080)=0x1) 18:04:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x1c, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) [ 2545.189447][T19475] bridge57: port 1(bond0) entered blocking state [ 2545.214291][T19475] bridge57: port 1(bond0) entered disabled state [ 2545.293760][T19475] device bond_slave_0 entered promiscuous mode [ 2545.300070][T19475] device bond_slave_1 entered promiscuous mode [ 2545.306326][T19475] device bridge45 entered promiscuous mode 18:04:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/1, &(0x7f0000000080)=0x1) [ 2545.399269][T19479] bridge21: port 1(bond0) entered blocking state [ 2545.438624][T19479] bridge21: port 1(bond0) entered disabled state [ 2545.497713][T19479] device bond_slave_0 entered promiscuous mode [ 2545.504020][T19479] device bond_slave_1 entered promiscuous mode [ 2545.510360][T19479] device bridge20 entered promiscuous mode 18:04:08 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r1, 0x0) [ 2545.632446][T19467] device bond_slave_0 left promiscuous mode [ 2545.638466][T19467] device bond_slave_1 left promiscuous mode [ 2545.644468][T19467] device bridge45 left promiscuous mode [ 2545.678094][T19467] bridge57: port 1(bond0) entered disabled state [ 2545.759067][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2545.785552][T19477] device macsec0 left promiscuous mode [ 2545.814055][T19489] device bond_slave_0 left promiscuous mode [ 2545.820105][T19489] device bond_slave_1 left promiscuous mode [ 2545.826176][T19489] device bridge20 left promiscuous mode [ 2545.851993][T19489] bridge21: port 1(bond0) entered disabled state [ 2545.928189][T19514] bridge43: port 1(bond0) entered blocking state [ 2545.936229][T19514] bridge43: port 1(bond0) entered disabled state [ 2545.965687][T19520] bridge43: port 1(bond0) entered disabled state [ 2546.035323][T19525] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms 18:04:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 2546.125205][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x1c, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 18:04:09 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:09 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x38, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) 18:04:09 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) 18:04:09 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @remote}}, 0x1c) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/228, 0x7ffff000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}}], 0x2, 0x3f00, 0x0) [ 2546.384131][T19591] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms 18:04:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008001b"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 2546.572760][T19590] bridge57: port 1(bond0) entered blocking state [ 2546.579171][T19590] bridge57: port 1(bond0) entered disabled state [ 2546.643574][T19590] device bond_slave_0 entered promiscuous mode [ 2546.649884][T19590] device bond_slave_1 entered promiscuous mode [ 2546.656131][T19590] device bridge45 entered promiscuous mode 18:04:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x1c, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) [ 2546.770473][T19588] bridge21: port 1(bond0) entered blocking state [ 2546.783747][T19588] bridge21: port 1(bond0) entered disabled state [ 2546.834379][T19588] device bond_slave_0 entered promiscuous mode [ 2546.840744][T19588] device bond_slave_1 entered promiscuous mode [ 2546.847137][T19588] device bridge20 entered promiscuous mode [ 2546.899183][T19601] device bond_slave_0 left promiscuous mode [ 2546.905214][T19601] device bond_slave_1 left promiscuous mode [ 2546.912067][T19601] device bridge20 left promiscuous mode [ 2546.963502][T19601] bridge21: port 1(bond0) entered disabled state [ 2547.026280][T19602] device bond_slave_0 left promiscuous mode [ 2547.032413][T19602] device bond_slave_1 left promiscuous mode [ 2547.038339][T19602] device bridge45 left promiscuous mode [ 2547.089547][T19602] bridge57: port 1(bond0) entered disabled state [ 2547.152003][T19613] bridge43: port 1(bond0) entered blocking state [ 2547.159517][T19613] bridge43: port 1(bond0) entered disabled state [ 2547.173776][T19623] bridge43: port 1(bond0) entered disabled state [ 2547.242010][T19645] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2547.283731][T19645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2547.304638][T19645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2547.314654][T19645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2547.407160][T19644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2547.445554][T19644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2547.474751][T19644] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2547.503046][T19646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2547.529890][T19646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2547.557829][T19646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2547.578759][T19646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2547.698741][T19648] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms 18:04:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) [ 2547.742642][T19662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 18:04:10 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 18:04:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x4) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0xc0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) [ 2547.846027][T19662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 18:04:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x808002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x83, 0x0, 0x8}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @loopback={0x689}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 18:04:10 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) 18:04:10 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x18fec}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473330e55cff26d1b0e001d00090000005ed10befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18:04:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "a55e4d"}, '1'}}}, 0x2f) 18:04:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 18:04:11 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 2548.251205][T19691] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 2548.375104][ T29] audit: type=1804 audit(1597082651.339:3483): pid=19697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 [ 2548.484509][ T29] audit: type=1800 audit(1597082651.339:3484): pid=19697 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16210 res=0 [ 2548.599084][ T29] audit: type=1804 audit(1597082651.349:3485): pid=19697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 [ 2548.671674][ T29] audit: type=1804 audit(1597082651.369:3486): pid=19697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 [ 2548.720151][T19691] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 18:04:11 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) [ 2548.763868][T19684] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 18:04:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x4) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0xc0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) [ 2548.882134][ T29] audit: type=1804 audit(1597082651.389:3487): pid=19696 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1585/cgroup.controllers" dev="sda1" ino=16017 res=1 [ 2548.939974][T19691] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 2548.996511][ T29] audit: type=1804 audit(1597082651.669:3488): pid=19702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 [ 2549.148751][ T29] audit: type=1804 audit(1597082652.109:3489): pid=19697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 18:04:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) 18:04:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="ca", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="d846155df498747976142f4e7eb0a54cf93f3962", 0x14}, {&(0x7f0000001080)="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", 0x31e}], 0x2}}], 0x2, 0x0) [ 2549.263260][ T29] audit: type=1804 audit(1597082652.109:3490): pid=19702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 18:04:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1ff, 0x7, 0x9}, 0x3c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xdd, &(0x7f0000000240)=""/221, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2549.383877][T19695] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 2549.393746][ T29] audit: type=1804 audit(1597082652.109:3491): pid=19701 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3239/memory.events" dev="sda1" ino=16210 res=1 [ 2549.442584][T19691] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 18:04:12 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x80000001}, 0x10) close(r0) [ 2549.562731][ T29] audit: type=1804 audit(1597082652.399:3492): pid=19731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1586/cgroup.controllers" dev="sda1" ino=16226 res=1 18:04:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x808002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x83, 0x0, 0x8}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @loopback={0x689}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 18:04:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='>'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000400000000000200000007000100667700000c000200080001"], 0x38}}, 0x0) 18:04:12 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee05fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000000) 18:04:13 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@zcopy_cookie={0x13}], 0x18}, 0x0) 18:04:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x4) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0xc0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:13 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20) 18:04:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='>'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000400000000000200000007000100667700000c000200080001"], 0x38}}, 0x0) 18:04:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) 18:04:13 executing program 3: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) shutdown(r0, 0x0) 18:04:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 18:04:13 executing program 3: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) shutdown(r0, 0x0) 18:04:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 18:04:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x808002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x83, 0x0, 0x8}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @loopback={0x689}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 18:04:13 executing program 3: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) shutdown(r0, 0x0) 18:04:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) [ 2550.778019][T19776] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 18:04:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='>'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000400000000000200000007000100667700000c000200080001"], 0x38}}, 0x0) 18:04:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000a56000)=0x1, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 18:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) 18:04:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x4) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0xc0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:14 executing program 3: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) shutdown(r0, 0x0) 18:04:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='>'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000400000000000200000007000100667700000c000200080001"], 0x38}}, 0x0) 18:04:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xb, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x5c}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 18:04:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x64}, [@call={0x5c}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 18:04:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xb, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x5c}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) [ 2551.632092][T19815] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 18:04:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x808002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x83, 0x0, 0x8}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @loopback={0x689}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 18:04:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xb, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x5c}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 18:04:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @local={0xfc, 0x0}}]}, 0x30}}, 0x0) 18:04:14 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:04:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) [ 2551.886320][T19848] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 18:04:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) 18:04:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xb, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x5c}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 18:04:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf5a17327c", 0xfffffffffffffdcb, 0x11, 0x0, 0xcb) mmap(&(0x7f00003eb000/0x4000)=nil, 0x4000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) 18:04:15 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1) 18:04:15 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x1, 0x1fd, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000000240), 0x0}, 0x20) 18:04:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='veno\x00', 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x65c15bf2) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) 18:04:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x1, 0x6000}]}, {0x0, [0x47]}}, &(0x7f0000004600)=""/194, 0x27, 0xc2, 0x8}, 0x20) [ 2552.315193][T19859] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 2552.316816][T19868] BPF:[1] FUNC G [ 2552.330843][T19868] BPF:type_id=0 [ 2552.339231][T19868] BPF: [ 2552.363413][T19868] BPF:Invalid func linkage [ 2552.378801][T19868] BPF: [ 2552.378801][T19868] [ 2552.407573][T19868] BPF:[1] FUNC G [ 2552.421027][T19868] BPF:type_id=0 [ 2552.433172][T19868] BPF: [ 2552.438378][T19868] BPF:Invalid func linkage [ 2552.472782][T19868] BPF: [ 2552.472782][T19868] 18:04:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 18:04:15 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x100000002) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, 0x0) close(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000001000), 0x3fffffffffffefe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_genetlink_get_family_id$nbd(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 18:04:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) 18:04:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}}, &(0x7f0000000040)=0xb0) 18:04:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='t', @ANYBLOB], 0x74}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x158, 0x4000000, 0x158, 0x0, 0x0, 0x158, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r5 = accept4(r4, &(0x7f00000002c0)=@alg, &(0x7f0000000040)=0x80, 0x180800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5244, @local, 0x1000}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0xfffffff9}, @in6={0xa, 0x4e24, 0xfff, @mcast1, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @remote, 0x6}, @in6={0xa, 0x4e21, 0x6, @private2, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @empty, 0x8}], 0xf4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 18:04:15 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x1, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) 18:04:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x60}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:04:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="5500000018007f5f00fe02b2a4a280930206030000050001000000103900090035000c021400000019000540a8000600000022dc1338d54600009b84016ef75afb83de4411001200c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = socket(0x10, 0x400000100080003, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x2e7, 0x0) 18:04:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='veno\x00', 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x65c15bf2) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) 18:04:16 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:04:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='t', @ANYBLOB], 0x74}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x158, 0x4000000, 0x158, 0x0, 0x0, 0x158, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r5 = accept4(r4, &(0x7f00000002c0)=@alg, &(0x7f0000000040)=0x80, 0x180800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5244, @local, 0x1000}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0xfffffff9}, @in6={0xa, 0x4e24, 0xfff, @mcast1, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @remote, 0x6}, @in6={0xa, 0x4e21, 0x6, @private2, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @empty, 0x8}], 0xf4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 18:04:16 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1847bf", 0x14, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@dstopts={0x21}], "63af6c3fb074dd2912a07cf9"}}}}}, 0x0) 18:04:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000004000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:04:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) read(r0, &(0x7f0000000440)=""/116, 0xfffffffffffffdef) 18:04:17 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvfrom(r0, &(0x7f0000000100)=""/1, 0x1, 0x0, &(0x7f0000000140)=@nl, 0x747000) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0xfffffd6d) [ 2554.215361][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r0, 0x1}, 0x20) [ 2554.457369][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000004000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:04:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r0, 0x1}, 0x20) 18:04:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='t', @ANYBLOB], 0x74}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x158, 0x4000000, 0x158, 0x0, 0x0, 0x158, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r5 = accept4(r4, &(0x7f00000002c0)=@alg, &(0x7f0000000040)=0x80, 0x180800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5244, @local, 0x1000}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0xfffffff9}, @in6={0xa, 0x4e24, 0xfff, @mcast1, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @remote, 0x6}, @in6={0xa, 0x4e21, 0x6, @private2, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @empty, 0x8}], 0xf4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 18:04:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='veno\x00', 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x65c15bf2) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) [ 2554.823827][T19959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r0, 0x1}, 0x20) 18:04:18 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:04:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000004000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:04:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='o'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 18:04:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000440)=@udp=r0, 0x1}, 0x20) [ 2555.372914][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x84}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) 18:04:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2}]}, 0x108) 18:04:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000004000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:04:18 executing program 2: mmap(&(0x7f0000198000/0x2000)=nil, 0x2000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 18:04:18 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) [ 2555.851163][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='t', @ANYBLOB], 0x74}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x158, 0x4000000, 0x158, 0x0, 0x0, 0x158, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r5 = accept4(r4, &(0x7f00000002c0)=@alg, &(0x7f0000000040)=0x80, 0x180800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5244, @local, 0x1000}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0xfffffff9}, @in6={0xa, 0x4e24, 0xfff, @mcast1, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @remote, 0x6}, @in6={0xa, 0x4e21, 0x6, @private2, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @empty, 0x8}], 0xf4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 18:04:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='veno\x00', 0x5) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x65c15bf2) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) 18:04:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f0000000280)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) accept(r4, 0x0, 0x0) close(r4) splice(r0, 0x0, r3, 0x0, 0xc0, 0x0) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe847a071") write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17) 18:04:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1004e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:04:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, 0x0, 0x0) 18:04:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "0300"}, 0x6) 18:04:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, 0x0, 0x0) 18:04:19 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:04:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, 0x0, 0x0) 18:04:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r0, 0x0, 0x0) 18:04:20 executing program 1: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 18:04:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) [ 2557.200953][T20045] IPVS: ftp: loaded support on port[0] = 21 18:04:20 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[@dstopts={0x0, 0x0, [], [@generic={0x0, 0x3, "a2e085"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 2557.336070][T20045] vcan0 speed is unknown, defaulting to 1000 18:04:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000fdfdfff67a0af0ffd8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000020000000009c050000002c9f3c429adad5ff4c6fa026093e530cf08ee2e0542d3029c9efa46b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c45aa7e2b347a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c56f0979bd10b97163c1d6d0e196b328c46c7060d1e86ac65b0a2cb9cde13bc5a0da36de66ff32f257e6873eb953ab12bda45cbe8f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf400d3ab967e0dd8e263f63223b7b80197aa743fe055193161f45346b100000000000000000089e399f6609876b5887437a172ebc02a748675298b79dc194e533583412dff048fc21f28bcd3e26a5ab2728a0481e9f0da43bb6cfb851ce5a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a347c24a9fb6a6991d01737d527d6acb15426415b6e8b14f822e86067a5e991c3b4049840000000000000000000000000000638052d8e3b2ff65c26205a9645bf6c3cf80d9914e168b44ada3ab7414d5900ea169ebfb5bffce00009ef5f98e91dbcb16af73488858a71be1e3f69b3f96b9b32a325f2957182c477564b9621f9713bea546b0a28c260c4a431e4d13a990a99f49e0a8eb5c3301868f135b651f23366a9cc638cc12dceff25d5f0a7ba04fd1c2f26e04c70d3bdce726d5b0e1fd84770c97dbdd4849b51a349c16d60a3c4c333887288dd8a68a9bb73f9e352dc8c26725984e3ea0577b8c58326c6f519910c93a5be441c3c32a39c12d3b5183465297076053c54faa98eae04a66b23e0bd5d54504a5fc5634e58a5200"/673], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 18:04:20 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8) 18:04:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 18:04:20 executing program 5: bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:04:20 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500cc000000000034ce6c91df26d9f0f5c593584e02987fdc4f242eb73ec9e65260316cccc37ac5e707db149ce9d1b619f2a7391021dc43f75063a32a059cfd4d669f91fd30083d023054b842bf4395ad6cb727aad0d0df6f56baf06839cec8c0c2917cbf358b22b6"], &(0x7f0000000040)='GPL\x00', 0x5, 0xba, &(0x7f00000001c0)=""/186, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x1}, 0x70) close(r0) close(r1) 18:04:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/673], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 18:04:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:04:20 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x805, 0x0) close(0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="3c0e00000000000000010001030000000660a126f2407065869bf6aa1ad3ac84cc5408608d789ae6b0ec3be743e30d0bbea377b87e201056e9d9207f7cf5b12ce1a676c393948c5ce188379d4cdd212e41da518ffed920097fa9edbd8698711bfbef5f9833831bebe16b443b3506"], 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x1e, 0x805, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="e3d9532374df2df7216dd97f5e6de8cc71a865b7bb2ce73055f2c48dbe945b48", 0x20, 0x20042180, &(0x7f0000000180)={0x11, 0x16, r6, 0x1, 0x2, 0x6, @random="74fd16da602e"}, 0x14) 18:04:20 executing program 0: unshare(0x6c060000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190016000300000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000001740)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ab8000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x14) [ 2557.876056][T20080] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 2557.917108][T20081] IPVS: ftp: loaded support on port[0] = 21 [ 2557.943248][T20084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2557.976403][T20046] IPVS: ftp: loaded support on port[0] = 21 [ 2558.077379][T20081] vcan0 speed is unknown, defaulting to 1000 [ 2558.251205][T24296] tipc: TX() has been purged, node left! [ 2558.352634][T20046] vcan0 speed is unknown, defaulting to 1000 [ 2558.613945][T20080] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 2558.630068][T20088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:04:21 executing program 1: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 18:04:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local, 0x0, 0x2}]}, 0x38}}, 0x0) 18:04:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/673], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 18:04:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 18:04:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:04:21 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x75, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000005000000000000000500000000000000", @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000190f00"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r2, @ANYBLOB="00000000fdffffffffffffff00000000000000010000000000000000"]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) 18:04:22 executing program 3: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 18:04:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r3}, 0x18) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg$alg(r1, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8808}, 0xc001) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:04:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/673], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x10, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 18:04:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xfc, 0x4) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0xd17, 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x6}, 0x10) write(r5, 0x0, 0x0) bind(r5, &(0x7f0000000180)=@x25={0x9, @null=' \x00'}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf8, r3}, 0x14) [ 2559.161992][T20174] IPVS: ftp: loaded support on port[0] = 21 [ 2559.286936][T20174] vcan0 speed is unknown, defaulting to 1000 [ 2559.308939][T20181] IPVS: ftp: loaded support on port[0] = 21 [ 2559.321787][T20185] device batadv0 entered promiscuous mode 18:04:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) pipe(&(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="ef12d182ac2e25644b18e414", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@dev, 0x40, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x9c2, 0x5, 0xffffffffffffffff, 0x7f}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}, 0xe8) socket(0x9, 0x80000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r3, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002a00110300edffffffffffffff000000e2e778912f71ffe8e506ad5b94be85539114b96a81bb604254070797f78211885bca20c86d9e2287093e579713ef30a47b73138b6ba38269bb5eb319823b44c8db3ae2041e67c965013436453107f3ff8cafba7adca91f738ca2dbbd7e9ca4bb5a5a44baacecbb213ae26464b806d83d19138907d1f637ca1358c1c7e8be32ac5bdc09751fc440494e2d432b4d27f14a5cfa20b9aa23491458fd377e1ab39cc868b0e80d2a0a3c2df4860cd260eba821fab8ba7d58a4091854da64d760870b438c04e8ba2583939a5688d1e4d6f4d7d2cf65c8cc8d"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) r4 = accept(r3, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) [ 2559.848127][T20189] 8021q: adding VLAN 0 to HW filter on device batadv0 18:04:23 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x75, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000005000000000000000500000000000000", @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000190f00"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r2, @ANYBLOB="00000000fdffffffffffffff00000000000000010000000000000000"]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) [ 2560.762669][T20181] vcan0 speed is unknown, defaulting to 1000 18:04:23 executing program 1: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 18:04:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r3}, 0x18) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg$alg(r1, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8808}, 0xc001) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:04:23 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e80)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000ec0)={0x1d, r3, 0x0, {0x0, 0x0, 0x507e9f6fbff868c0}}, 0x4b) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002f000511d25a80648c63940d0224fc60100006400a0005000200000037153e370a000180020a0000d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x280000000000002, &(0x7f0000000100)=0x78, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001080)=""/4112, 0x1010}], 0x1}, 0x40000104) sendmmsg$inet(r4, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)}], 0x1}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005640)="7a13fd9b7703cdde13627b3c9ed47b49381dcdb9147747c5d1daa88df01086dc6efedaa68f797bc1537977b723b18fda69f000555b0e0bcb8a7f34522e3b48682ac71b07385fcaa296cdeabd5e867c0c23bab3df78a5948cfe705b5f462c5ea274837b8299417e18c0bd7720001dbcccb5fc0c44e7ebea028ec2c586f3ff534ed02bebdeeb4695ddfacb4a9ab3a8", 0x8e}, {&(0x7f0000000280)="1aabee49d2eb6978cc0e938df45ca09da534d8818739156bceaaf607abc453f0007087b76733e56c81060bdc4fccaac4f798c7e3a0425489c021718dcb19c2e5e0757b82c6b500e392ec091384ebd8010916673f7b7be32cf7b2d5ab66ef05fd2225c6ef1f278c3b9a7bba1fa56cdf4b8cf5796a9aada04f34fe2312f84be5fec6cd81b15de161c39a4e3007f38d1f0ee49d71035c2ab89d642d8b504be424e9601e8f7e9e53eaa709160f4b34976640794450cdce8aa82c70b53ec30e1ae18065b6f814e80befb7d2e858127ac853e8adb812f9372d6595dd43efafcfc8b7fec93d14dea936cb0a8171c33cc97a4eb08f86f38bdc92746fb4", 0xf9}, {&(0x7f0000000700)="39570b51ab522bf5e148097caf9d86df0bc95abce83912b63845ce5d4cd971120b378dd4db1577855c898b36726bf7ea12118bac68e60845b7c15b35af7ea0784a3f87dc34e72a94adcaf358ca4e8a2a8ae495f62bc7e42f79680f63fc224ff1a89cb8ab8865e166dbcaf5fff791b4fce5e7960cb8b5b518c9b748e66e331b13e72c53b707b468be719ca42a102e43b20de4296be031ef522560926762a57e5c3ce1f21cc603a8c447f45e1fa346d6c634e3cf373482c18b28883b3bb5324c91548958b2d1786bd167fdc5d5f73eb23d04db06568981d1b887c29ede412434a6321fc42343d341aef245ec23a1aba0ceff09fdb35e236c75fd077a8e78cb145e0bc5214223a2", 0x106}, {&(0x7f0000005900)="8244da56e9c5f60a73c57d302883d0d08c17bcda486f85c03674b359ccf9c3dc3f490a4c8e4d2a81e42f0063847b70acf6447253f2cc78ec51cfc6c82930ba045f574aa53e9b522af7e9ccec23a54db7a884350799339517135e2abfacbc3545b238a3869f72775034550a29e7d4a8cb8baefd2d165c2d0c41c736652fffb05e25208a190e6152c8422ae56c2245d2fc27d342fc678b8f4702dec9ebdcf011eaedb5c99214ccc8dc3eb531c22f7632a8423966dcbf42f153ef1643f3a6f68a071bc6bc4820f23c5d0b14de396f5d3e4d311566fadf006a7ad8f34e107cca16", 0xdf}], 0x4}}], 0x2, 0x0) shutdown(r4, 0x1) 18:04:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) pipe(&(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="ef12d182ac2e25644b18e414", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@dev, 0x40, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x9c2, 0x5, 0xffffffffffffffff, 0x7f}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}, 0xe8) socket(0x9, 0x80000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r3, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002a00110300edffffffffffffff000000e2e778912f71ffe8e506ad5b94be85539114b96a81bb604254070797f78211885bca20c86d9e2287093e579713ef30a47b73138b6ba38269bb5eb319823b44c8db3ae2041e67c965013436453107f3ff8cafba7adca91f738ca2dbbd7e9ca4bb5a5a44baacecbb213ae26464b806d83d19138907d1f637ca1358c1c7e8be32ac5bdc09751fc440494e2d432b4d27f14a5cfa20b9aa23491458fd377e1ab39cc868b0e80d2a0a3c2df4860cd260eba821fab8ba7d58a4091854da64d760870b438c04e8ba2583939a5688d1e4d6f4d7d2cf65c8cc8d"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) r4 = accept(r3, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) 18:04:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x198, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x1, 0x3}, 0x14}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001c80)={'team0\x00', 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001c40)=ANY=[@ANYBLOB="8bb169ef", @ANYRES16=0x0, @ANYBLOB="06002800c0000000000000000000000001410000002000170000001700000800657a683a76657468305f746f5f626174616476000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', r6, 0x29, 0x3f, 0x7f, 0x5, 0x59, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x0, 0x20, 0x5, 0x8000}}) socketpair(0x11, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x0, r7, 0x16, r8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001980)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f00000031c0)=ANY=[@ANYBLOB='_\a\x00A', @ANYBLOB="aa6e5a6cdf90e041b90d9ed8a5e84bdfe768fe28f2ad2cce218bc808651e361db906d0a3c010792e829efe781349937ad8433ce2dde061f9", @ANYBLOB="10002dbd7000fcdbdf254b0000002c002c80080000007f000000080000000900000008000000736c00000800000002000000080000000800000068047d809f00010068f951e5261e616b4b9b24414824ce7c661ba6dec7ce0b0ce5b2d926dbcf1297160920e8088f1ee876672a52c3fbb5a1b2c7c4a14c3d208f23289a4556e77bf6cf3347aa9b012cbb7df3cb2ab26a2133ce33b68e92ab51d818213e94cb24beeaa03b198831a3e5b0bf0162f50d01209b79f89b0ebe64da7f5aede970de6a715b11b3429ff15e1912ec94342595afdc4bc1b9624bd15ee5678c066b00fc00000006bfdc16e68bbf8dc19f09a2868270a590c3c9fd303d5e702e0e2dd7c152f1ff53a691714328242a6c7aa93d6532efe34e50fea4290f7a98b8f05977a7ed31ab821dcb7cf05368d33471d469d22aaa825b7a7c97522defd142cb474eee72375b70f0247178ea4f6a4d0c793d98764db46ea5ffb97c632161cd9cbb075c0b256da6ad204f33b45d0a6387ffcc8e1d16f1fc530b0b7dd703041fdd9b8c392a9af86d16eba80f491e652eb99fb67b35a79623220918ee266c9e6b83f1271dad8778b2bf77b465f1c9d56476c6bf096d0ef31fd0db77343d72aff8710d8669bcf1998c5734366d37072ada3c1204135d53fa6754457d46c230c241000000a7525fd9bd67b157b3ad4b61cf1b9915748aa47bb2ab604ae4c079717f90ed8b34d993425247e8105466abc9f691fad40b5306f1db8915c7e01385928500000062000000c8dd5d313c6d3ab7a052f0162392cad9c9ef923c5403966d7c4a99a320b6b646df5d8bff9ef004cdb7f6e43d79469badce4cd1fa8e81785d86c9256450bf10307f0245e7cce35eef51aa5b3889f62dec6735921598ec8b419488e11655cc00008600030064201212a723b8de0f6fa7eaf4f721bbe2c4798c65038170169da1e808492779597108c2accc16f69a14a31e918745bf71d67bae8b5196d2a084181307d96b961cb3dada4b35093b0b6fb85d2da37157fc5b2fc41f93f980092c874212ef47a9023f248e94e13f72710bdb08ee6c68b88970d4ebe02cf3d983b5afa42dac569111090000b400020088042d75a200b621686a414f1ba7600256e6bf96a5e33aa227b47548aa2735a73ea42543a99a3c4298c974a51114656df61c9889b5e0d51dfce1c535771fd01c14c647790fdc8ec95d0e1f12fa8eb7362e7899423e3f8ffa1eb8edf206c42e5753330e612e232b5461659c4e48c852496a35794bb7e425e67d6b20fd16fe5b0cc0d7279e00b082ed723663de59f5112b166adf970e65700c0a4c128506a29cf8beca0c46e8c2c58b9bbb3fa57db32921e4000100bbfa1c7c3903ae57dfb3e891806b1f1357429a20d2b775d86e33d603dccf49d6b3ba76628ae964d60e2f27a050a94b2ade6d16a1aaa780bcfeecfaeabe9b80a3d259815ed44bb29f3561e777d5807fa4e09304c1025731f5e83ea1219084a9d96eee2992457e621fbabd55514e13db2229fcd3ea1ea41dfb65724e9004ff01104b94f54615d6742cae7be281c1133c61411f02bd5b36b4070c5b50ee5a89cc57c59e1dc3b9e8098b898c42817f8b1ec85457db323d8078d1b611c43492d63f8b5568c29c1c3da139df76db340e423b4a217ae914d99d47b0a27cc2771e07fc8cac002a0071b217aee3df60fe8d83aa994e2c06ecb8cffb8b492da9916ff9aa9150d9ecb31749f42286d1f653e6a8bece8b8f6e357f0c14999be096bc63ac3279db2db77ea27dedd0c66a91957fefefefece54724cdc88858f273a437df1f63577397b398009d095022c562432ffd0d5f9d4871d5e5ff8bdc5aeb3bfc46df9b4d8c3a31f3ad5a7fbe281a306b49595764115b9fc4eadc93610323cc2c3cf779b3855d6dd77d2999f26c69c9d5fd012a0032309225eec093f35229e7e0cbb436b795607e63fc8a83792d095f13d48f698ddf720118246e586b7c0c507ae8a8ad78f5b5ea783b707bceee3237422d5207a7d59274bec42310681d5cae4950bd18ccb64209f12de48a550c2efd8afea98b7561040bf555ed73da7fb67b75b15d7d845a20c6302aaf75820bf60b48f259a22356e89195ab06acb774bf07a5d4cce69c2e0da7aa154a1dce09f2c68b8c6eed58cee88215fc3636769be29175f69188dd05eed90f701bb7fe40f31fc4e10b9db8cfa0bbef4831ddbf7fbf6901bcb77cfc5a66656baaf0b12ed61d19961126fb6e07f78929c894dcd5a7ced443bb3b1f8bc7643a85df8ce190e3cde79ff96f844a68c23cc519953ec34b34d915e49538c9eda90513a593a027f8132b3f12c09c7459b7f1020dd5f871a3c04edd75f44a26e330c114f34797543f662af498e30e1fc785b9ea794cbc0fc334470db75a008289565387fa2664306adbb8e5fe57ca741da49c92bd84a92972d0e8e5938a3217b7e38396131e42cbb5b1f3fcee83148e488fb29c6fb605dd44a81349ea2c3818ff8af7d4d0f62726a18899a5ed846e625ea62baea6a1f93dac80f6e15fcba178ca80ff30f8dc9634041e8d2ac422987495d4ea65589ec4496e3a9db014bbf750d01995dd751a2730a6277e378c4c25b27b667bff068b866d91825092713fdd791085e559f0322571550000000800dc00060000000600eb0000100000040087000800010003000000"], 0x770}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) socket(0x18, 0x800, 0x3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 2561.234377][T20245] IPVS: ftp: loaded support on port[0] = 21 18:04:24 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x75, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000005000000000000000500000000000000", @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000190f00"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r2, @ANYBLOB="00000000fdffffffffffffff00000000000000010000000000000000"]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) [ 2561.573421][T20242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2561.634068][T20245] vcan0 speed is unknown, defaulting to 1000 18:04:25 executing program 3: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 18:04:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r3}, 0x18) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg$alg(r1, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8808}, 0xc001) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:04:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettaction={0x28, 0x31, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}}, 0x0) [ 2562.351840][T20287] IPVS: ftp: loaded support on port[0] = 21 18:04:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) pipe(&(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="ef12d182ac2e25644b18e414", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@dev, 0x40, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x9c2, 0x5, 0xffffffffffffffff, 0x7f}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}, 0xe8) socket(0x9, 0x80000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r3, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002a00110300edffffffffffffff000000e2e778912f71ffe8e506ad5b94be85539114b96a81bb604254070797f78211885bca20c86d9e2287093e579713ef30a47b73138b6ba38269bb5eb319823b44c8db3ae2041e67c965013436453107f3ff8cafba7adca91f738ca2dbbd7e9ca4bb5a5a44baacecbb213ae26464b806d83d19138907d1f637ca1358c1c7e8be32ac5bdc09751fc440494e2d432b4d27f14a5cfa20b9aa23491458fd377e1ab39cc868b0e80d2a0a3c2df4860cd260eba821fab8ba7d58a4091854da64d760870b438c04e8ba2583939a5688d1e4d6f4d7d2cf65c8cc8d"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) r4 = accept(r3, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) 18:04:25 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x75, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000005000000000000000500000000000000", @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000190f00"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r2, @ANYBLOB="00000000fdffffffffffffff00000000000000010000000000000000"]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) [ 2562.596039][T20283] 8021q: adding VLAN 0 to HW filter on device batadv0 18:04:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2562.698122][T20287] vcan0 speed is unknown, defaulting to 1000 [ 2563.245698][T20314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2563.283883][T20314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2563.860193][T20314] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 2563.871039][T20314] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 2563.879710][T20314] IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready [ 2563.893187][T20314] IPv6: ADDRCONF(NETDEV_CHANGE): gtp3: link becomes ready [ 2564.007091][T20319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2564.015242][T20319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2564.116094][T20319] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 2564.125034][T20319] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 2564.134325][T20319] IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready [ 2564.142599][T20319] IPv6: ADDRCONF(NETDEV_CHANGE): gtp3: link becomes ready [ 2564.257866][T20324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2564.266499][T20324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2564.372559][T20324] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 2564.380564][T20324] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 2564.389000][T20324] IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready [ 2564.399249][T20324] IPv6: ADDRCONF(NETDEV_CHANGE): gtp3: link becomes ready [ 2564.513914][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2564.522607][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2564.620557][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 2564.629416][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 2564.637947][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready [ 2564.646983][T20325] IPv6: ADDRCONF(NETDEV_CHANGE): gtp3: link becomes ready [ 2565.201574][ T26] tipc: TX() has been purged, node left! [ 2565.207603][ T26] tipc: TX() has been purged, node left! [ 2565.222533][ T26] tipc: TX() has been purged, node left! [ 2565.228503][ T26] tipc: TX() has been purged, node left! [ 2565.245520][ T26] tipc: TX() has been purged, node left! 18:04:29 executing program 1: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 18:04:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r3}, 0x18) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg$alg(r1, &(0x7f00000000c0), 0x4924924924924d8, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8808}, 0xc001) r4 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:04:29 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400024c, 0x0) 18:04:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) pipe(&(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="ef12d182ac2e25644b18e414", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@dev, 0x40, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x9c2, 0x5, 0xffffffffffffffff, 0x7f}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x6, 0xfffffffe}}, 0xe8) socket(0x9, 0x80000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r3, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002a00110300edffffffffffffff000000e2e778912f71ffe8e506ad5b94be85539114b96a81bb604254070797f78211885bca20c86d9e2287093e579713ef30a47b73138b6ba38269bb5eb319823b44c8db3ae2041e67c965013436453107f3ff8cafba7adca91f738ca2dbbd7e9ca4bb5a5a44baacecbb213ae26464b806d83d19138907d1f637ca1358c1c7e8be32ac5bdc09751fc440494e2d432b4d27f14a5cfa20b9aa23491458fd377e1ab39cc868b0e80d2a0a3c2df4860cd260eba821fab8ba7d58a4091854da64d760870b438c04e8ba2583939a5688d1e4d6f4d7d2cf65c8cc8d"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) r4 = accept(r3, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) 18:04:29 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x4e}}) 18:04:29 executing program 3: unshare(0x6c060000) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4e, {0x2, 0x4e22, @loopback}, 'veth1_macvtap\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) [ 2566.289290][T20376] IPVS: ftp: loaded support on port[0] = 21 [ 2566.326256][T20379] IPVS: ftp: loaded support on port[0] = 21 18:04:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0xb0}, &(0x7f0000000100)=0x18) [ 2566.562773][T20380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2566.593807][T20376] vcan0 speed is unknown, defaulting to 1000 18:04:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "b6270a0cf767b27a", "3ba9f03b16701860d5fc74a8704f32ac", "713afe44", "b6b0145ef78c497e"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="fd", 0x3fff, 0x8000, 0x0, 0x0) 18:04:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0xff, 0x4) pipe(&(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 18:04:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "b6270a0cf767b27a", "3ba9f03b16701860d5fc74a8704f32ac", "713afe44", "b6b0145ef78c497e"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="fd", 0x3fff, 0x8000, 0x0, 0x0) 18:04:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, r1, 0x821, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 18:04:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "b6270a0cf767b27a", "3ba9f03b16701860d5fc74a8704f32ac", "713afe44", "b6b0145ef78c497e"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="fd", 0x3fff, 0x8000, 0x0, 0x0) [ 2567.420575][T20379] vcan0 speed is unknown, defaulting to 1000 18:04:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}}, 0x0) 18:04:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, r1, 0x821, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 18:04:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "b6270a0cf767b27a", "3ba9f03b16701860d5fc74a8704f32ac", "713afe44", "b6b0145ef78c497e"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="fd", 0x3fff, 0x8000, 0x0, 0x0) 18:04:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r11, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 18:04:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001640)=@deltfilter={0x354, 0x2d, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0xad5}, @TCA_RATE={0x6, 0x5, {0xf5}}, @filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x314, 0x2, [@TCA_BASIC_CLASSID={0x8}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xb}}, @TCA_BASIC_ACT={0x2f8, 0x3, [@m_mirred={0xf8, 0x4, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x0, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x20000000, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x7, 0x3, 0x0, 0xffffffff}, 0x3}}, @TCA_MIRRED_PARMS={0x20}]}, {0x29, 0x6, "b8f72a99420d29bb84602f2b2f16cb59fafec47482d571f10db0c7ece9b91d8388a76c18f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x184, 0x0, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x14a, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x40, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x38, 0x0, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0x9, 0x6, "9c0a646682"}, {0xc}, {0xc}}}]}]}}]}, 0x354}}, 0x4000003) 18:04:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0xff, 0x4) pipe(&(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 18:04:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, r1, 0x821, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 18:04:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 18:04:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:04:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2001, 0x3, 0x280, 0x138, 0x150, 0x150, 0x138, 0x150, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@mac={{0x30, 'mac\x00'}, {@local}}, @common=@unspec=@cluster={{0x30, 'cluster\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) [ 2568.125332][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 18:04:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, r1, 0x821, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 2568.255264][T20465] bridge32: port 1(vlan4) entered blocking state [ 2568.278153][T20465] bridge32: port 1(vlan4) entered disabled state [ 2568.375113][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:31 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) 18:04:31 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 18:04:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800802ebbff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) 18:04:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}}, 0x0) 18:04:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) [ 2568.581964][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2568.632351][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2568.632366][ T29] audit: type=1804 audit(1597082671.600:3495): pid=20498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3265/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2568.637795][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:04:31 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0xff, 0x4) pipe(&(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 18:04:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) bind(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff}}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6316}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_STA_WME_MAX_SP={0xf, 0x2, "47bb4de591649b301cf59e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "8944cd698ce085fe039ac5e7b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x4004040) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) close(r0) 18:04:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x1, 0x1f, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000340), 0x400, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/143, &(0x7f00000001c0), &(0x7f0000000240), 0x3, r1}, 0x38) [ 2568.717493][T20510] bridge33: port 1(vlan5) entered blocking state [ 2568.745200][T20510] bridge33: port 1(vlan5) entered disabled state 18:04:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0xd0, 0x210, 0x210, 0x2e0, 0x2e0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@empty, @remote, [], [], 'veth0_to_team\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0xb}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@remote, @local, [], [], 'wg2\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@rand_addr=' \x01\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 18:04:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}}, 0x0) 18:04:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800802ebbff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) 18:04:32 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 2569.350076][ T29] audit: type=1804 audit(1597082672.310:3496): pid=20536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3266/cgroup.controllers" dev="sda1" ino=16379 res=1 18:04:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x2c}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) [ 2569.416547][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:04:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0xff, 0x4) pipe(&(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 18:04:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x727, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 2569.696862][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2569.785439][T20541] bridge34: port 1(vlan6) entered blocking state [ 2569.813719][T20541] bridge34: port 1(vlan6) entered disabled state 18:04:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:32 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 18:04:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}}, 0x0) 18:04:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601035bd42269fa4e00002700e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 18:04:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800802ebbff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) [ 2570.187029][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:04:33 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 2570.323355][T20582] bridge35: port 1(vlan7) entered blocking state [ 2570.364914][ T29] audit: type=1804 audit(1597082673.330:3497): pid=20595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir076943076/syzkaller.pLGfzj/3269/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 2570.374587][T20582] bridge35: port 1(vlan7) entered disabled state [ 2570.505470][ T29] audit: type=1804 audit(1597082673.360:3498): pid=20593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1615/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 2570.556323][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.625789][ T29] audit: type=1804 audit(1597082673.501:3499): pid=20594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3267/cgroup.controllers" dev="sda1" ino=16380 res=1 18:04:33 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 18:04:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/221, 0x2e, 0xdd, 0x1}, 0x20) 18:04:33 executing program 4: r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x82, &(0x7f0000000100), 0x8) 18:04:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 18:04:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:34 executing program 5: unshare(0x40000000) mmap(&(0x7f000043f000/0x3000)=nil, 0x3000, 0x3, 0x100010, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 2571.109728][ T29] audit: type=1804 audit(1597082674.071:3500): pid=20617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3280/cgroup.controllers" dev="sda1" ino=15710 res=1 18:04:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a5800802ebbff000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000000) [ 2571.228220][T20628] IPVS: ftp: loaded support on port[0] = 21 [ 2571.237806][ T29] audit: type=1804 audit(1597082674.161:3501): pid=20622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3280/cgroup.controllers" dev="sda1" ino=15710 res=1 18:04:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) [ 2571.318610][T20628] vcan0 speed is unknown, defaulting to 1000 [ 2571.519112][ T29] audit: type=1804 audit(1597082674.481:3502): pid=20644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir958513053/syzkaller.dYFHu4/3268/cgroup.controllers" dev="sda1" ino=16368 res=1 [ 2571.699500][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2571.708066][ T29] audit: type=1804 audit(1597082674.531:3503): pid=20645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3227/cgroup.controllers" dev="sda1" ino=16376 res=1 18:04:34 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001a000503030000008d63940d0124fc60100006400a0002bd000000000000000000000000e43da71a441c", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) sendfile(r2, r1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x68, 0x0, 0x8b8e0eb13081c495, 0x0, 0x0, {{0x1, 0x0, 0x5901}, {0x0, 0x4109}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) socketpair(0x22, 0x3, 0xffffffff, &(0x7f00000015c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) [ 2571.974507][ T29] audit: type=1804 audit(1597082674.591:3504): pid=20650 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1616/cgroup.controllers" dev="sda1" ino=16360 res=1 18:04:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) [ 2572.200707][T20654] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 18:04:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) [ 2572.262923][T20654] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 18:04:35 executing program 4: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x6, 0x0, 0x80, 0x1f, 0x3}, 0xc) socket(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 18:04:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) [ 2572.362543][T20630] IPVS: ftp: loaded support on port[0] = 21 18:04:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) [ 2572.475574][T20630] vcan0 speed is unknown, defaulting to 1000 [ 2572.584511][T20674] IPVS: ftp: loaded support on port[0] = 21 18:04:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) 18:04:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) 18:04:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) [ 2573.533206][T20674] vcan0 speed is unknown, defaulting to 1000 18:04:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_mtu=0xfff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_settings={0xdd, 0x0, @te1=0x0}}) 18:04:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) 18:04:36 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0xffffffffffffffff}, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) 18:04:36 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/251, 0xfb}}], 0x2, 0x10000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 18:04:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x1c}}, 0x0) [ 2574.143802][T20728] IPVS: ftp: loaded support on port[0] = 21 [ 2574.346634][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2574.346649][ T29] audit: type=1804 audit(1597082677.301:3513): pid=20763 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir318284759/syzkaller.TjnXMe/1618/cgroup.controllers" dev="sda1" ino=16374 res=1 [ 2574.557651][ T29] audit: type=1804 audit(1597082677.341:3514): pid=20764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir495626248/syzkaller.8HN7by/3229/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 2574.987167][T20728] vcan0 speed is unknown, defaulting to 1000 18:04:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x20, 0x0, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000000c0)={0xc}) 18:04:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000400)="11", 0x1}], 0x1) 18:04:38 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x17b) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001900)="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", 0x16f, 0x40040c4, &(0x7f0000002900)={0xa, 0x0, 0x7, @empty, 0x744bf633, 0x1}, 0x20) 18:04:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8000000}]}}}]}, 0x40}}, 0x0) 18:04:38 executing program 4: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x6, 0x0, 0x80, 0x1f, 0x3}, 0xc) socket(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 18:04:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507001900000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r5, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 18:04:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1300, 0x1120, 0xb, 0xc, 0x5, 0x2, 0x1230, 0x258, 0x258, 0x1230, 0x258, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, [0x38, 0x7a]}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0x0, 0xa003], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x10d8, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1360) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 2575.839494][T20829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2575.885804][T20862] IPVS: ftp: loaded support on port[0] = 21 18:04:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8000000}]}}}]}, 0x40}}, 0x0) [ 2575.936796][T20878] xt_cgroup: invalid path, errno=-2 [ 2575.972840][T20878] xt_cgroup: invalid path, errno=-2 18:04:39 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x17b) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001900)="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", 0x16f, 0x40040c4, &(0x7f0000002900)={0xa, 0x0, 0x7, @empty, 0x744bf633, 0x1}, 0x20) 18:04:39 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x17b) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001900)="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", 0x16f, 0x40040c4, &(0x7f0000002900)={0xa, 0x0, 0x7, @empty, 0x744bf633, 0x1}, 0x20) 18:04:39 executing program 1: pselect6(0x40, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f0000000400)={&(0x7f00000003c0), 0x1}) [ 2576.557238][T20862] vcan0 speed is unknown, defaulting to 1000 [ 2576.563576][T20821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:04:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8000000}]}}}]}, 0x40}}, 0x0) 18:04:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "62d2fd3bdd3e903d", '\x00', "d2290c3f", "6a3cce19cf3b5f26"}, 0x28) 18:04:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x237, 0x0, @l2={'eth', 0x3a, 'rose0\x00'}}}}}, 0x34}}, 0x0) 18:04:39 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x100, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0xfffffc61) close(r4) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r4}, 0x40) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4) clock_gettime(0x3, &(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) [ 2576.943651][T20953] tipc: Enabled bearer , priority 10 [ 2576.967916][T20973] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 18:04:39 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x17b) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001900)="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", 0x16f, 0x40040c4, &(0x7f0000002900)={0xa, 0x0, 0x7, @empty, 0x744bf633, 0x1}, 0x20) [ 2576.997212][T20989] tipc: Enabling of bearer rejected, already enabled 18:04:40 executing program 4: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xc, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x6, 0x0, 0x80, 0x1f, 0x3}, 0xc) socket(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 18:04:40 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:04:40 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x17b) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001900)="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", 0x16f, 0x40040c4, &(0x7f0000002900)={0xa, 0x0, 0x7, @empty, 0x744bf633, 0x1}, 0x20) 18:04:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8000000}]}}}]}, 0x40}}, 0x0) 18:04:40 executing program 1: socket(0x40000000015, 0x805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket(0x10, 0x80002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)={{0x107, 0x20, 0x0, 0xe, 0x20c, 0xffffffff, 0xa4}}, 0x20) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c002000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b0f, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 2577.656220][ T26] tipc: TX() has been purged, node left! [ 2577.662192][ T29] audit: type=1804 audit(1597082680.621:3515): pid=21025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir495498641/syzkaller.oXlOGJ/3289/cgroup.controllers" dev="sda1" ino=15836 res=1 [ 2577.693314][ T26] tipc: TX() has been purged, node left! [ 2577.703948][ T26] tipc: TX() has been purged, node left! [ 2577.724338][T23918] ================================================================== [ 2577.732427][T23918] BUG: KASAN: slab-out-of-bounds in __lock_acquire+0x41d0/0x5640 [ 2577.740134][T23918] Read of size 8 at addr ffff8880497850a0 by task kworker/1:2/23918 [ 2577.748099][T23918] [ 2577.750427][T23918] CPU: 1 PID: 23918 Comm: kworker/1:2 Not tainted 5.8.0-syzkaller #0 [ 2577.758475][T23918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.768617][T23918] Workqueue: events l2cap_chan_timeout [ 2577.774065][T23918] Call Trace: [ 2577.777348][T23918] dump_stack+0x18f/0x20d [ 2577.781674][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2577.786694][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2577.791717][T23918] print_address_description.constprop.0.cold+0xae/0x436 [ 2577.798732][T23918] ? vprintk_func+0x97/0x1a6 [ 2577.803321][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2577.808423][T23918] kasan_report.cold+0x1f/0x37 [ 2577.813180][T23918] ? debug_object_assert_init+0x180/0x2e0 [ 2577.818890][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2577.823910][T23918] __lock_acquire+0x41d0/0x5640 [ 2577.828766][T23918] ? lockdep_hardirqs_off+0x89/0xc0 [ 2577.833955][T23918] ? trace_hardirqs_off+0x27/0x210 [ 2577.839055][T23918] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2577.845028][T23918] ? debug_object_assert_init+0x246/0x2e0 [ 2577.850740][T23918] ? debug_object_init_on_stack+0x20/0x20 [ 2577.856454][T23918] lock_acquire+0x1f1/0xad0 [ 2577.860967][T23918] ? lock_sock_nested+0x3b/0x110 [ 2577.865899][T23918] ? lock_release+0x8e0/0x8e0 [ 2577.870569][T23918] ? mark_held_locks+0x9f/0xe0 [ 2577.875328][T23918] ? lock_is_held_type+0xbb/0xf0 [ 2577.880277][T23918] _raw_spin_lock_bh+0x2f/0x40 [ 2577.885031][T23918] ? lock_sock_nested+0x3b/0x110 [ 2577.889960][T23918] lock_sock_nested+0x3b/0x110 [ 2577.894723][T23918] l2cap_sock_teardown_cb+0x88/0x400 [ 2577.900010][T23918] l2cap_chan_del+0xad/0x1300 [ 2577.904682][T23918] l2cap_chan_close+0x118/0xb10 [ 2577.909529][T23918] ? lock_acquire+0x1f1/0xad0 [ 2577.914201][T23918] ? l2cap_retransmit_all+0x760/0x760 [ 2577.916901][T21036] IPVS: ftp: loaded support on port[0] = 21 [ 2577.919563][T23918] ? lock_release+0x8e0/0x8e0 [ 2577.919576][T23918] ? lock_downgrade+0x830/0x830 [ 2577.919588][T23918] ? __schedule+0x88e/0x21e0 [ 2577.919601][T23918] ? _raw_spin_unlock_irq+0x1f/0x80 [ 2577.919617][T23918] l2cap_chan_timeout+0x173/0x450 [ 2577.919633][T23918] process_one_work+0x94c/0x1670 [ 2577.919647][T23918] ? lock_release+0x8e0/0x8e0 [ 2577.919668][T23918] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2577.964675][T23918] ? rwlock_bug.part.0+0x90/0x90 [ 2577.969608][T23918] worker_thread+0x64c/0x1120 [ 2577.974285][T23918] ? process_one_work+0x1670/0x1670 [ 2577.979475][T23918] kthread+0x3b5/0x4a0 [ 2577.983536][T23918] ? __kthread_bind_mask+0xc0/0xc0 [ 2577.988644][T23918] ? __kthread_bind_mask+0xc0/0xc0 [ 2577.993755][T23918] ret_from_fork+0x1f/0x30 [ 2577.998156][T23918] [ 2578.000477][T23918] Allocated by task 3899: [ 2578.004799][T23918] save_stack+0x1b/0x40 [ 2578.008949][T23918] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2578.014574][T23918] __kmalloc+0x17a/0x340 [ 2578.018820][T23918] tomoyo_realpath_from_path+0xc3/0x620 [ 2578.023421][T21036] vcan0 speed is unknown, defaulting to 1000 [ 2578.024348][T23918] tomoyo_check_open_permission+0x272/0x380 [ 2578.024364][T23918] tomoyo_file_open+0xa3/0xd0 [ 2578.040870][T23918] security_file_open+0x52/0x3f0 [ 2578.045805][T23918] do_dentry_open+0x3a0/0x1290 [ 2578.050559][T23918] path_openat+0x1bb9/0x2750 [ 2578.055137][T23918] do_filp_open+0x17e/0x3c0 [ 2578.059628][T23918] do_sys_openat2+0x16f/0x3b0 [ 2578.059790][ T4602] tipc: 32-bit node address hash set to fbff1eac [ 2578.064285][T23918] __x64_sys_open+0x119/0x1c0 [ 2578.064298][T23918] do_syscall_64+0x2d/0x70 [ 2578.064309][T23918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2578.064312][T23918] [ 2578.064317][T23918] Freed by task 3899: [ 2578.064328][T23918] save_stack+0x1b/0x40 [ 2578.064338][T23918] __kasan_slab_free+0xf5/0x140 [ 2578.064346][T23918] kfree+0x103/0x2c0 18:04:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) [ 2578.064358][T23918] tomoyo_realpath_from_path+0x191/0x620 [ 2578.064366][T23918] tomoyo_check_open_permission+0x272/0x380 [ 2578.064381][T23918] tomoyo_file_open+0xa3/0xd0 [ 2578.120811][T23918] security_file_open+0x52/0x3f0 [ 2578.125739][T23918] do_dentry_open+0x3a0/0x1290 [ 2578.130493][T23918] path_openat+0x1bb9/0x2750 [ 2578.135073][T23918] do_filp_open+0x17e/0x3c0 [ 2578.139569][T23918] do_sys_openat2+0x16f/0x3b0 [ 2578.144238][T23918] __x64_sys_open+0x119/0x1c0 [ 2578.148906][T23918] do_syscall_64+0x2d/0x70 18:04:41 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x17b) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001900)="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", 0x16f, 0x40040c4, &(0x7f0000002900)={0xa, 0x0, 0x7, @empty, 0x744bf633, 0x1}, 0x20) [ 2578.153312][T23918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2578.159193][T23918] [ 2578.161509][T23918] The buggy address belongs to the object at ffff888049784000 [ 2578.161509][T23918] which belongs to the cache kmalloc-4k of size 4096 [ 2578.175555][T23918] The buggy address is located 160 bytes to the right of [ 2578.175555][T23918] 4096-byte region [ffff888049784000, ffff888049785000) [ 2578.189422][T23918] The buggy address belongs to the page: [ 2578.195057][T23918] page:ffffea000125e100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea000125e100 order:1 compound_mapcount:0 [ 2578.208497][T23918] flags: 0xfffe0000010200(slab|head) [ 2578.213802][T23918] raw: 00fffe0000010200 ffffea0001c34088 ffffea000122f088 ffff8880aa002000 [ 2578.222387][T23918] raw: 0000000000000000 ffff888049784000 0000000100000001 0000000000000000 [ 2578.230957][T23918] page dumped because: kasan: bad access detected [ 2578.237357][T23918] [ 2578.239670][T23918] Memory state around the buggy address: [ 2578.245292][T23918] ffff888049784f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2578.253350][T23918] ffff888049785000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2578.261401][T23918] >ffff888049785080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2578.269448][T23918] ^ [ 2578.274547][T23918] ffff888049785100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2578.282611][T23918] ffff888049785180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2578.290657][T23918] ================================================================== [ 2578.298703][T23918] Disabling lock debugging due to kernel taint [ 2578.304841][T23918] Kernel panic - not syncing: panic_on_warn set ... [ 2578.311422][T23918] CPU: 1 PID: 23918 Comm: kworker/1:2 Tainted: G B 5.8.0-syzkaller #0 [ 2578.320861][T23918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.330920][T23918] Workqueue: events l2cap_chan_timeout [ 2578.336375][T23918] Call Trace: [ 2578.339660][T23918] dump_stack+0x18f/0x20d [ 2578.343987][T23918] ? __lock_acquire+0x40f0/0x5640 [ 2578.349008][T23918] panic+0x2e3/0x75c [ 2578.352896][T23918] ? __warn_printk+0xf3/0xf3 [ 2578.357470][T23918] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 2578.363263][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2578.368279][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2578.373312][T23918] end_report+0x4d/0x53 [ 2578.377465][T23918] kasan_report.cold+0xd/0x37 [ 2578.382135][T23918] ? debug_object_assert_init+0x180/0x2e0 [ 2578.387848][T23918] ? __lock_acquire+0x41d0/0x5640 [ 2578.392868][T23918] __lock_acquire+0x41d0/0x5640 [ 2578.397727][T23918] ? lockdep_hardirqs_off+0x89/0xc0 [ 2578.402918][T23918] ? trace_hardirqs_off+0x27/0x210 [ 2578.408026][T23918] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2578.414002][T23918] ? debug_object_assert_init+0x246/0x2e0 [ 2578.419716][T23918] ? debug_object_init_on_stack+0x20/0x20 [ 2578.425424][T23918] lock_acquire+0x1f1/0xad0 [ 2578.429925][T23918] ? lock_sock_nested+0x3b/0x110 [ 2578.434859][T23918] ? lock_release+0x8e0/0x8e0 [ 2578.439531][T23918] ? mark_held_locks+0x9f/0xe0 [ 2578.444289][T23918] ? lock_is_held_type+0xbb/0xf0 [ 2578.449233][T23918] _raw_spin_lock_bh+0x2f/0x40 18:04:41 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001800)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 2578.453999][T23918] ? lock_sock_nested+0x3b/0x110 [ 2578.460578][T23918] lock_sock_nested+0x3b/0x110 [ 2578.465339][T23918] l2cap_sock_teardown_cb+0x88/0x400 [ 2578.470620][T23918] l2cap_chan_del+0xad/0x1300 [ 2578.475294][T23918] l2cap_chan_close+0x118/0xb10 [ 2578.480142][T23918] ? lock_acquire+0x1f1/0xad0 [ 2578.484818][T23918] ? l2cap_retransmit_all+0x760/0x760 [ 2578.490186][T23918] ? lock_release+0x8e0/0x8e0 [ 2578.494852][T23918] ? lock_downgrade+0x830/0x830 [ 2578.499693][T23918] ? __schedule+0x88e/0x21e0 [ 2578.504278][T23918] ? _raw_spin_unlock_irq+0x1f/0x80 [ 2578.509475][T23918] l2cap_chan_timeout+0x173/0x450 [ 2578.514499][T23918] process_one_work+0x94c/0x1670 [ 2578.519435][T23918] ? lock_release+0x8e0/0x8e0 [ 2578.524127][T23918] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2578.529494][T23918] ? rwlock_bug.part.0+0x90/0x90 [ 2578.534429][T23918] worker_thread+0x64c/0x1120 [ 2578.539112][T23918] ? process_one_work+0x1670/0x1670 [ 2578.544308][T23918] kthread+0x3b5/0x4a0 [ 2578.548370][T23918] ? __kthread_bind_mask+0xc0/0xc0 [ 2578.553472][T23918] ? __kthread_bind_mask+0xc0/0xc0 [ 2578.558578][T23918] ret_from_fork+0x1f/0x30 [ 2578.564313][T23918] Kernel Offset: disabled [ 2578.568623][T23918] Rebooting in 86400 seconds..